Harinder Bhandari

1. Community
2. Using Sumo Logic
3. How to use Unix Timestamp field for Log defaultDateFormats field

Unix epoch timestamps are supported in the following formats: 10 digit epoch time format surrounded by brackets (or followed by a comma). The digits must be at the very start of the message. For e...

• View comment
• Harinder Bhandari
• February 15, 2023 19:10
• Edited
• 1 vote

1. Community
2. Query Library
3. New users who have not changed their passwords

Hi Zack You can use this search using parse regex: _sourceCategory=windows ("4720" OR "4723" OR "4724")| parse regex "\"EventID\"\:\"(?<EventID>.*?)\"," nodrop| parse regex "\"TargetUserName\":\"(?...

• View comment
• Harinder Bhandari
• September 29, 2022 18:58
• Edited
• 1 vote

1. Community
2. Managing Sumo Logic
3. How to migrate. alerts and dashboards from one environment to other

Hi Prabhu, You can export content from US deployment by doing these steps: Export Content in the Library In the Library, do either: To export an item, navigate to it, click the details icon for t...

• View comment
• Harinder Bhandari
• June 11, 2021 23:38
• 1 vote

1. Community
2. Using Sumo Logic
3. Parse out items of a list that has a variable length

Hi Elliot, You should parse regex and use multi option to parse list of items of variable length. For Example: | parse regex "size=(?<file_size>.*?)\)\," multi https://help.sumologic.com/05Search/S...

• View comment
• Harinder Bhandari
• February 25, 2021 20:05
• 1 vote

1. Community
2. Using Sumo Logic
3. How do you create "Applied at: Run Time" FERs (Field Extraction Rules)

Currently, "Run Time" FER only applies to JSON data, and all other data is parsed and "Applied at" the ingest time. Hope this helps. Thanks

• View comment
• Harinder Bhandari
• December 02, 2020 08:30
• 1 vote

1. Community
2. Using Sumo Logic
3. Dashboard table panel decimal rounding?

Hi Cameron, Since it needs more investigation, It would be best if you open a support ticket with Sumo Logic providing the dashboard and panel name. we will help you with the solution.   Thanks, Ha...

• View comment
• Harinder Bhandari
• August 19, 2020 19:32
• 1 vote

1. Community
2. General Discussion
3. Docker sumologic/collector container causing problems with docker service

Please try downgrading your collector to a lower than 19.209-23 version and see if that fixes docker stats issue. 

• View comment
• Harinder Bhandari
• January 12, 2018 18:21
• 1 vote

1. Community
2. Sending Data
3. How to send data to Sumo ?

Since your app is logging data to local file system. You can use an installed collector and configure a local file source to upload data to Sumo Logic.  Here are steps to install a collector on Lin...

• View comment
• Harinder Bhandari
• October 12, 2022 20:57
• 0 votes

1. Community
2. Query Library
3. Unchanged user password query for certain time frame

Hi Zack, You can use this search query: _sourceCategory=windows  ("4723")| parse regex "\"EventID\"\:\"(?<EventID>.*?)\"," nodrop| parse regex "\"TimeCreated\":\"(?<event_time>.*?)\"," nodrop| pars...

• View comment
• Harinder Bhandari
• September 29, 2022 19:10
• Edited
• 0 votes

1. Community
2. Applications and Integrations
3. Installing Collector Fails

Hope you have created an installation token as per steps documented here: https://help.sumologic.com/Manage/Security/Installation_Tokens  If it is taking longer than expected to register your colle...

• View comment
• Harinder Bhandari
• May 25, 2022 18:37
• 0 votes