hi
I use the search below and I call it from a loadjob command
After the loadjob execution, I need to filter the data by host but it doesnt works
I had | table host after | stats dc(host) but nothing happends
what is the problem please??
`AppliService` Name="wuauserv"
| fields Name, host
| stats dc(host)
| loadjob savedsearch="admin:TEST_sh:FO_EventServiceLog_Serv_1"
| search host=$tok_filterhost$
↧