Kevin Keech

1. Community
2. Using Sumo Logic
3. Sumo logic auth logs

You will want to look at enabling the audit index within your account. You can enable this by:1.) From the left-hand navigation go to Administration > Security 2.) Select the Policies tab 3.) En...

• View comment
• Kevin Keech
• January 14, 2019 18:32
• 0 votes

1. Community
2. Sending Data
3. Cannot get collector to pick up new local source

Hi Peter, If your Collector was not initially installed with the syncSources property set it would have been installed in UI management mode. In order to switch a Collector to start using the JSON ...

• View comment
• Kevin Keech
• November 22, 2018 02:01
• 0 votes

1. Community
2. Using Sumo Logic
3. Shared dashboard now asking for login

Hi Mark,You will want to validate the following.1.) Your Security Policy under "Administration > Security > Policies" still allows for Public dashboards.2.) Your Whitelisting rules ...

• View comment
• Kevin Keech
• November 14, 2018 17:11
• 1 vote

1. Community
2. Using Sumo Logic
3. Aggregating more than two fields into a graph

What is the memory value you want to show per time bucket? Average, min, max? The following example should show you the average memory per timeslice and stage and get you a chart with the multiple ...

• View comment
• Kevin Keech
• September 21, 2018 18:19
• 0 votes

1. Community
2. General Discussion
3. transpose to show percentage column and not count

A few other aggregation operators that you may be able to use are min, max, and avg. So maybe something like the following will help get you the result you need? | parse "source=* " as ap...

• View comment
• Kevin Keech
• September 12, 2018 20:26
• 1 vote

1. Community
2. Using Sumo Logic
3. Use count by with multiple where clauses

Hi Marc, I believe what you'll need to do something like the following. | if (timetaken > 750, 1, 0) as greaterthan_750| if (timetaken <= 750, 1, 0) as lessthanequal_750| sum(greaterthan_750)...

• View comment
• Kevin Keech
• September 11, 2018 15:37
• 1 vote

1. Community
2. Managing Sumo Logic
3. remote agent heart beat

Hi Vivek, I think the query in the following documentation page may be what you are looking for. https://help.sumologic.com/Manage/Ingestion-and-Volume/Monitor-Ingestion-and-Receive-Alerts#Data_not...

• View comment
• Kevin Keech
• August 16, 2018 20:30
• 0 votes

1. Community
2. Query Library
3. How do I write a query to list all the keys in a json log?

The  JSON Auto function should be able to automatically parse out all the keys from your JSON message. This will create a field for each key name and its value. However, note there is a limit of 10...

• View comment
• Kevin Keech
• August 13, 2018 23:05
• 1 vote

1. Community
2. Using Sumo Logic
3. how to convert string with escape characters to json

Hi Pavan, You'd have to convert this string to a valid JSON format before you'll be able to parse this as JSON. Might try something like the following. (assuming your string is the raw message. If ...

• View comment
• Kevin Keech
• July 11, 2018 16:35
• 0 votes