
David Marcoux
- Total activity 7
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 2
- Subscriptions 0
Comments
Recent activity by David Marcoux Sort by recent activity-
Something like this might work: if(isnull(sqoopcost),0,sqoopcost ) as sqoopcost
-
Hi Brannen, To achieve the "running list" type of display that you want you could add _messagetime as one of your fields. This basically ensures that log data isn't rolled up. Try something like...
-
Try this query over the past 30 days. It provides a lot of really helpful information about _sourcehosts that have stopped sending logs. Note, there are a few configurable parameters inside the qu...
-
Did you see the "Suggested Searches for Linux OS Systems" help page? https://service.us2.sumologic.com/help/Default.htm#Linux_OS.htm%3FTocPath%3DSearching%2520Data%7CSearch%2520Query%2520Language%...
-
Any guides, overviews, or personal experience stories of converting queries would be helpful for me too.