The following is my search query :-
index=* | regex _raw!=".*2016-\d{2}-\d{2}.*" | stats values(host) as hosts
Also is there any way that I can see all the sources per host in which my search string satisfies?
↧