SPL
Event Logs | System Logs | Warnings and Errors
Description
This will hit all of the host and pull back the eventlogs and group them by Message.
You can change the source to what ever windows eventlogs you need
8 0
source=wineventlog:application
source=wineventlog:security
source=wineventlog:system
host="*" source=wineventlog:system NOT Type=Information | stats count by Message | sort -count | table count, Message
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.