Hai
i have log file as shown below:
start_time=2015-04-02 10:41:54,end_time=2015-04-02 10:42:51,duration=57,event=JAVA
start_time=2015-04-02 10:47:27,end_time=2015-04-02 10:48:41,duration=74,event=coherence
start_time=2015-04-02 11:15:58,end_time=2015-04-02 11:16:11,duration=13,event=nosql
with this data i want to show each event start_time and end_time.. Can anyone help
Thank u
Hi, try this
index=your_index_name sourcetype=your_sourcetype_name start_time=* end_time=* event=* | table event start_time end_time