Christian
- Total activity 23
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 9
Activity overview
Latest activity by Christian-
Christian commented,
hey Gordon - have a look at the fillmissing operator: https://help.sumologic.com/Search/Search-Query-Language/aaGroup/fillmissing I think it might do the trick. let us know - otherwise, would love ...
-
Christian commented,
do you the values for field "label"? then you could try using "fields - ...". in general, if you have a column called, say, "foo", you can remove it by saying: | fields - foo
-
Christian commented,
hi Kelly. let's tease this apart a bit: _collector=dsjobs "emrusage" | json auto "fulla.cost", "pyspark.cost","followrecommendations.cost","sqoop.cost" as fullacost, pysparkcost,followcost,sqoopc...
-
Christian commented,
| fields - _raw at the end of the query. chr.
-
Christian commented,
try this (and i agree, this could be easier/more obvious): | json field=_raw "name", "hostname", "pid", "message_id","message_type", "worker_id", "level", "msg", "time", "v"
-
Christian created a post,
How do you use Docker?
Hey everybody, let's turn things around for change :) Today, I would like to ask the community to help us learn more about how folks are using Docker these days. It is a topic that is coming up wi...
-
Christian commented,
add this at the end of the query (and you can remove the sort): | transpose row _timeslice column http_response this will massage the result set in such a way that charted by a bar, line, or area...
-
Christian commented,
hey Steven - could you copy the query here? for charts with a time-based X axis this should actually not be a problem but it sorta depends what comes out the other end of the query. happy to take a...
-
Christian commented,
try this: _sourceCategory=app_service | parse "* * * * *+* [*] * * - *" as iso_time,hostname,log_type,dater,time,timezone,service_type,syslog_level,java_app,other | count, sum(_size) as sum_size ...
-
Christian commented,
here's status code you should expect: 401 on authentication errors 400 on bad requests, e.g. the stream is NOT in gzip format when Content-Type indicates so 429 on exceeding quota 503 when we n...