List Notable events with closing history details Opeyemi Olatunji 2 0 `notable` | stats latest(lastTime) as LastTimeSeen values(rule_name) as "Rule Name" values(comment) as "Historical Analysis" values(user) as User by _time event_id, urgency | eval LastTimeSeen=strftime(LastTimeSeen,"%+") 123 `notable`| stats latest(lastTime) as LastTimeSeen values(rule_name) as "Rule Name" values(comment) as "Historical Analysis" values(user) as User by _time event_id, urgency| eval LastTimeSeen=strftime(LastTimeSeen,"%+") Continue Reading →
