I need some assistance figuring out how to use GROK to separate a Message into it’s pieces.
How do I break this log down? I am newb to GROK and am not even sure where to start.
Remote Desktop Services: Session logon succeeded:
Session ID: 289
Source Network Address: 10.0.0.1