Can we pass the parameters in seacrch query like this-:
items = [100,200,300,400,500] for item in items:
rule = "finding the occurence of item " + item + “in logs”
Rule has a dynamic values passed as a parameter
Can we pass the parameters in seacrch query like this-:
items = [100,200,300,400,500] for item in items:
rule = "finding the occurence of item " + item + “in logs”
Rule has a dynamic values passed as a parameter
You can but it requires an Enterprise (Security/Operational) license. If you can keep your data under 2GB a day, you can have a license for free…
Mayby I am to exact with wording, but: a rule is a snippet of code running in a stage of a pipeline.
Dynamic values for searches in Dashboards can be done with the feature of parameters, as @tmacgbay stated, but that is something different. This feature is quite nice to be honest, but if you are good with saved searches this could help as well.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.