Ad slot: top

SPL

Event Logs | System Logs | Warnings and Errors

Description

Submitted by kharris

This will hit all of the host and pull back the eventlogs and group them by Message. You can change the source to what ever windows eventlogs you need
8 0
source=wineventlog:application
source=wineventlog:security
source=wineventlog:system
host="*" source=wineventlog:system NOT Type=Information | stats count by Message | sort -count | table count, Message

Comments

0 total

Be the first to comment on this SPL.

Leave a comment

You must log in to post a comment.

Ad slot: bottom