
Graham Watts
- Total activity 110
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 66
Activity overview
Latest activity by Graham Watts-
Graham Watts commented,
Official comment Hi Nagaraju,For this use case, you should use a Search Filter for the Role assigned to all users who should not see this sensitive data.For example, if your log line looks like this: 2020-09-0...
-
Graham Watts commented,
Official comment Hello Kunihko,Please log a support ticket here so that we can investigate and resolve this for you as quickly as possible: https://support.sumologic.com/hc/en-us/requests/new
-
Graham Watts commented,
Hi Kota,There are a few options here, parse anchor is probably the easiest assuming these fields are consistently in the order shown in your example log. _sourceCategory=<my/category>| parse "* | *...
-
Graham Watts commented,
Official comment Hey Soumya,You can plot both series in one table like this: (_sourceCategory=app1 or _sourceCategory=app2) "HTTP/1.1 500" | count by _sourceCategory| sort _count You could also plot these over ti...
-
Graham Watts commented,
Hi Sagan, You can use our new feature, Ingest Budgets, to apply a limit of collection per collector. This assumes you have an Enterprise Sumo subscription. Let us know if this is what you are looki...
-
Graham Watts commented,
Official comment Hey David,Can you try this query and let us know if this is what you're trying to see? _sourceCategory=prod/network| count by _sourceHost // assuming these are the source IPs| count by _sourceHost ...
-
Graham Watts commented,
Hey Ramakrishna,Are you trying to show the trend in percent of 400s? If so you could use something like this: _sourceCategory=graham/travel/nginx| parse "HTTP/1.1\" * " as sc nodrop| if(sc matches ...
-
Graham Watts commented,
Official comment Hey Aakif,Parse regex multi will allow you to parse out as many values for LoadBalancerName as there are in each log:https://help.sumologic.com/05Search/Search-Query-Language/01-Parse-Operators/02-...
-
Graham Watts commented,
Official comment Hey Alex,Transactionize can be very useful especially in this type of use case. Another way to get the duration is to use max() and min(), then do some math by each trace-id:| max(_messagetime), mi...
-
Graham Watts commented,
Official comment Hey Eliezer,I would suggest 2 options here: 1. Consider using Carbon2 metrics format Depending on what is generatin the metric, that tool may have an option to do this Carbon2 format allows you to...