SPL
Event Logs | System Logs | Warnings and Errors
8 0
Description
This will hit all of the host and pull back the eventlogs and group them by Message.
You can change the source to what ever windows eventlogs you need
source=wineventlog:application
source=wineventlog:security
source=wineventlog:system
host="*" source=wineventlog:system NOT Type=Information | stats count by Message | sort -count | table count, Message
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.