2015-09-02T14:01:02.228 Name=UPS6Z444706F2 Chkd_Out=Y DomID="Upstreamaccts\\racantr" Model="ProLiant WS460c Gen8 WS Blade" VideoAdapter="NVIDIA Quadro K3100M,HP Remote Graphics Driver" q_Action=reboot q_Status=SUCCESS q_DTRequest=1441219778.000 MenuID=43 RootName=RGFX Level1Name=Standard Type=Win7 Category=RGFX
Name = UPS6Z444706F2
host = UPSSQL15
source = dbmon-tail://WoRP/Worp_Reboot1
sourcetype = rgfx_Rebootstatus
The above is one event of many. I want to know the top 10 Name by q_Action
Like this:
sourcetype = rgfx_Rebootstatus | top limit=10 Name BY q_Action
Like this:
sourcetype = rgfx_Rebootstatus | top limit=10 Name BY q_Action
thank You.