Hi,
I am just trying to create a simple bar graph to show the count of the different type of windows log sourcetype, however it does not seems to work.
field: sourcetype
values: WMI:WinEventLog:Application, WinEventLog:Security, WinEventLog:System
This is my current search:
host= count(sourcetype="WinEventLog:System", sourcetype="WinEventLog:Security", sourcetpye="WMI:WinEventLog:Application")
Thank you in advance!
↧