Bug #1832
Tagging to exclude results is not working
Start date:
04/28/2017
Due date:
% Done:
100%
Description
It looks like the search isn't seeing the tags. It is using the default eventtypes instead.
litsearch ( sourcetype=web_ping NOT ( ( ( FILL_THIS_SEARCH_IN ) ) ) ( response_code>=500 OR timed_out=True OR total_time>10000 ) ) | litsearch ( sourcetype="web_ping" NOT ( ( ( FILL_THIS_SEARCH_IN ) ) ) ( response_code>=500 OR timed_out=True OR total_time>10000 ) ) | fillnull response_code value="Connection failed" | eval response_code=if(timed_out == "True", "Connection timed out", response_code) | addinfo type=count label=prereport_events | fields keepcolorder=t "prestats_reserved_*" "psrsvd_*" "response_code" "title" "total_time" "url" | prestats count max(total_time) by response_code title url
History
#1
Updated by Luke Murphey over 7 years ago
Updated by Options:
- Use a lookup instead
- Require editing the filter_website_monitoring_alerts eventtype
- Include a UI for adding entries to the filter_website_monitoring_alerts eventtype
#2
Updated by Luke Murphey over 7 years ago
- Target version changed from 2.2 to 2.4
#3
Updated by Luke Murphey over 7 years ago
- Target version changed from 2.4 to 2.5
#4
Updated by Luke Murphey over 7 years ago
- Target version changed from 2.5 to 2.7
#5
Updated by Luke Murphey almost 7 years ago
- Target version changed from 2.7 to 2.8
#6
Updated by Luke Murphey about 5 years ago
- Status changed from New to Rejected
- % Done changed from 0 to 100