number of lines from file is not matching in the count, want to check each events number of lines. ?
i think you are looking for the field linecount
This search will help you to know the event lines base search | table linecount, _raw
you can group by the linecount or _raw to explore further.
Hi,
there is a field called "linecount" in every event. (You need smart mode or verbose mode).
HTH,
Holger
i think you are looking for the field linecount
This search will help you to know the event lines base search | table linecount, _raw
you can group by the linecount or _raw to explore further.