I am trying to put together a notebook to see network load by process, I am only seeing an option for seeing the process group and it is only giving it by ID. I would like to see the actual process g...
Greetings! I'm attempting to DQL my way to a problems dashboard. Think of the classic Problems UI in DT, showing active problems and what's affected. So far my DQL is very b...
...asily" (ha!) create a DQL statement DPL Archtiect app that extracts values from a BizEvent (payload in XML format) that was captured before by this nice query: fetch bizevents
| filter event.type...
...vg(calc:name_metric), by:{dt.entity.service,Dimension}, interval:1h, from:$dt_timeframe_from, to:now() What is the expected availability of trace data for consultation in DQL?
Hi team,
I need a helping hand with the following DQL parsing.
| PARSE content, "
DATA{1,70000}?
(
('tenantId'|'tenant '|'tenant'|'TenantID'|'TenantId'|'tenantID'|'t...
Hello, We are facing a problem parsing log lines where we understand that the root cause is due to the data being multiline. Below is an example log: 2023-02-31 11:51:28,988 - INFO - Predi...
Hey Team, how do we parse data after a colon? For example here is a snippet from the log "mvcLastloginTimestamp":"1697106375080","thisCustomerNum":"123456789","objectClass": We're looking to parse ...
...ocumentation/UBA/5.3.0/User/Profile That allows them to have an uniform view of all the data, typically UTC. In DQL we can do a formatTimestamp to work around it - but I found no way to reliably u...
Hi,
What is the syntax to create a union of two fetch statmenents, bascially wanted a result of both fetch queires in a single statement
fetch `dt.entity.palo-alto:device` | fieldsAdd Syst...
I have a log ingested in Grails where I would like to count the number of entries of each user. The user name is the second column. User names are dynamic, I mean new users could appear daily.
USE...