Kevin Keech
- Total activity 223
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 59
Activity overview
Latest activity by Kevin Keech-
Kevin Keech commented,
This is something that would need to be configured within IIS, not within Sumo Logic. You would need to configure IIS to post this information into its logs so it can then be picked up by your Coll...
-
Kevin Keech commented,
Not currently through the installed Collector. Collecting Prometheus metrics will require a Hosted Collector and HTTP(S) Source and the following script. https://github.com/SumoLogic/sumologic-pro...
-
Kevin Keech commented,
Hi Bharat, There is no user export options within the Sumo Logic UI that will allow export of user and role information. However, you can use the user and roles management APIs to pull this informa...
-
Kevin Keech commented,
To simply find messages that contain the string "X-On-Behalf-Of" you can add that as a keyword to your search and you should then see any messages containing this string in your results. As long as...
-
Kevin Keech commented,
Austin, This is great. Thanks for posting the details of your query.
-
Kevin Keech commented,
So the issue is your Source is probably configured to parse out a timestamp from these messages. (this is the default) What is happening is Sumo Logic is parsing the timestamp found in your "Launch...
-
Kevin Keech commented,
The 'Time" value is the time Sumo Logic parsed from the raw log message at ingest time. based on your current Source configurations settings. Your screenshot does not show the raw message content s...
-
Kevin Keech commented,
Hi SaiKiran, Your question seems unrelated to the original topic of this post so might be good to post this as a separate topic. Just from looking at the results set and your query I am not sure ab...
-
Kevin Keech commented,
Hi Frank, From the initial description, it sounds like you might have a timestamp parsing misconfiguration with your Source. If the first line of your logs does not have a timestamp the receipt tim...
-
Kevin Keech commented,
Does the following work? This should provide a value for duplicates for each timeslice. _sourceCategory=prod | parse "Id=*;" as marketId| timeslice 1s| count(marketId) as c, count_distinct(marketI...