I'm trying to alter my current search to use the static token options I setup rather than raw numbers I have to later convert. How can I transpose those values from the site_token to my chart data? By the way I'm new...
index="fe_test" sourcetype=fe_xml source=$site_token$ $group_token$ | top limit=25 site_code
Thanks!
↧