After upgrading to 6.2 from 5 multikv does not work well for me.
it just does not extract the fields when the COMMAND is python.
search was not changed, just stopped working...
host=worker* sourcetype="lsof" | multikv fields COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME | search COMMAND="python"
Anyone else noticed that?
↧
