Harinder Bhandari
- Total activity 73
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 43
Activity overview
Latest activity by Harinder Bhandari-
Harinder Bhandari created an article,
Experiencing integration issues with the CrowdStrike threat intelligence database.
We are currently experiencing integration issues with the CrowdStrike threat intelligence database. In order to resolve this issue, we have had to pause our data synchronization. This means that th...
-
Harinder Bhandari created an article,
Experiencing ingestion issues for G-Suite Apps Audit sources
We are currently experiencing ingestion issues for G-Suite Apps Audit sources. These sources are affected: - Google Admin- Google Calendar- Google Drive- Google Login- Google Token For some custome...
-
Harinder Bhandari commented,
You can aggregate the data and remove the _count field using the "field" operator. Can you try this search: _collector=*.app.sce.prd-* and _sourceCategory=ecs and "TaskStatus: (RUNNING->STOPPED)"| ...
-
Harinder Bhandari commented,
A Keyword Search Expression defines the scope of data for the query and is always more efficient than using "where" operator. By default, keyword expressions are case-insensitive. Technically there...
-
Harinder Bhandari commented,
Can you please try with the July password: Sum0L0gic20!
-
Harinder Bhandari commented,
Sumo Logic has a feature called Surrounding messages that allow you to investigate events surrounding a message from the context of the Host, file name, or category identified enabling you to view ...
-
Harinder Bhandari commented,
Can you provide more information about your query and what you are trying to achieve?
-
Harinder Bhandari commented,
Yes, it is possible to create an alert for Windows Defender Logs based on a certain Event ID. For example, Event ID 5001 _sourceCategory="windows/events/windows_defender"| parse "EventCode = *;" as...
-
Harinder Bhandari commented,
Right now we do not have CRUD API for dashboards. We have a feature request pending for this here:https://ideas.sumologic.com/ideas/SL-I-2454 We are working on this feature actively and will be rel...
-
Harinder Bhandari commented,
You can use Webhook payload variables in the JSON payload object to send the fields you want to your webhook. If you need to use custom field, you can use {{Results.fieldname}} to customize your pa...