I have server logs with different host
names. Each of the host
has its distinct exception _message
. I want to show that into table how many times a specific host
has occurred in the server log.
example
Host Host Count message
----------------------------------------------------------------------------------------
server1 45 server1_exception
server2 6 server2_exception
server3 4 server3_exception
server4 20 server4_exception
Based on your table above I'm assuming this is what you are trying to do:
yoursearch | stats count by host, message
Let me know if that works for you. If not, could you post an example of your events?
Thanks,
J
Based on your table above I'm assuming this is what you are trying to do:
yoursearch | stats count by host, message
Let me know if that works for you. If not, could you post an example of your events?
Thanks,
J