James Witt
- Total activity 6
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 0
Activity overview
Latest activity by James Witt-
James Witt created a post,
Local Performance Source JSON file
Can I see a local performance source json file example?
-
James Witt created a post,
Is there a way to count the number of sourceHosts rather than counting the number of messages per sourceHost?
I want to be able to send out an alert based on a certain number of Hosts sending messages, not based on how many messages the Hosts are sending.
-
James Witt commented,
Thank you, that helps
-
James Witt commented,
_collector=Windows_Collector_Test _sourceName=Application |timeslice 1h | parse "SourceName = \"*\";" as Source | parse "Type = \"*\";" as Level | parse "EventCode = *;" as Event_Code |replace(even...
-
James Witt commented,
When performing that operation, only the last Replace command is acknowledged as if the Replace operators are overwriting each other. It does work to an extent when each command is designated its o...
-
James Witt created a post,
How do I use the replace operator on multiple strings within one field?
For example, I want to replace all number 5's with number 7's, and also replace all 4's with 2's.