Hello
In a report i use the code below in order to search an error code in my events
But when a code code is found i want to display the complete line event and not only the code error
index=main sourcetype="applog" | rex "Failed Error code : (?.*)" |table host ErrorCode
Thanks in advance for your help
↧