Dear,
I implemented Graylog server, I can normally receive logs from my servers …
I would like a dashboard that shows the number of impressions per user and printer on my print server.
In fact, it is showing the sum of the winlogbeat_user_data_Param8 field.
how can I do this?
Is it possible through the graylog interface to execute sql queries?
He
without knowing how you data is structured and normalized nobody would be able to help you writing a query to get the information you like to.
I use winlogbeat … I get the windows logs normally, however, event 307, the number of prints, I need to add the amount of these impressions that is the field winlogbeat_user_data_Param8 … how can I do this and show that counter on the dashboard?
