Stack Overflow
Stack Overflow

Questions tagged [sumologic]

Sumo Logic is a cloud-based log management and analytics service.

116 questions
1
vote
2 answers

Sumologic: calculate a value from two log queries

I have two log queries from the same stream that both return the number of log messages that match the search criteria. First I want to get the number of incoming blobs as follows: namespace=ns cluster=we container=project1 | where %"log.@m" matches…
Andras
  • 171
  • 3
  • 16
1
vote
1 answer

Include OS type (Linux/Windows) in Cloud Custodian's EC2 findings for AWS Security Hub

We have a Cloud Custodian policy for AWS EC2 that posts its findings to AWS Security Hub. Is there a way to include the EC2 OS type (Linux/Windows) in the details that are sent to Security Hub by Cloud Custodian? We're pushing Security Hub findings…
Harish KM
  • 1,303
  • 7
  • 17
1
vote
0 answers

Getting "Subquery failed with error: Field _messagetime not found, please check the spelling and try again." When attempting to use timeslice

This is my query. _sourceCategory=contactlist-prod [subquery:_sourceCategory=contactlist-prod "recycle" | count by campaign | compose campaign keywords] | parse "Handling export of*contacts" as message | replace(message, /([^0-9])/, "") as contacts…
Will Mannix
  • 83
  • 1
  • 9
1
vote
1 answer

How to count and compare amount of regex matches

I want to use Sumo Logic to count how often different APIs are called. I want to have a table with API call name and value. My current query is like this: _sourceCategory="my_category" | parse regex "GET.+443 (?/user/v1/)\d+"…
Pekka
  • 2,175
  • 15
  • 20
1
vote
2 answers

How to integrate data from Sumologic API into Power BI - user-not-found error

Goal: My goal is to take data from a Sumologic dashboard using the Sumologic API and display it within a dashboard in Power BI. I am checking the calls first within Git Bash, before entering the URLs into Power BI Desktop to visualize the data. I…
Micah
  • 479
  • 1
  • 7
  • 17
1
vote
1 answer

Sumologic chart for search result

i'm using sumologic. I have this table: query and table and want to display data in this format: X axis - timestamp Y axis - stacked values for duration (group by traceId, so one stacked column consist of first method duration/second method…
Joan Madou
  • 11
  • 1
1
vote
1 answer

How do I format a variable inside the broken double quotes of a curl command?

I am trying to test the Sumo Logic API by updating the information of my collector. The second curl command is the one that is causing the issue 'curl: (55) Failed sending PUT request'. It works in my terminal but not in the bash…
CubeDomination
  • 35
  • 9
1
vote
0 answers

HPA with Sumologic in Kubernetes

I have started receiving Spikes intermittently. I am using Sumologic for logs. I am thinking of using HPA. My K8S is in house setup. Does Sumologic support HPA? Service is implemented using ClusterIP. Duw to spike service returns 503. I feel HPA…
dotnetavalanche
  • 804
  • 2
  • 12
  • 25
1
vote
1 answer

Sumo Logic count various errors over time

I am trying to create a view of various kinds of errors over time, to display as stacked bar chart or stacked area. Each kind of error can be identified by matching a string (e.g., "No endpoint listening", "timed out", "User not found"), but these…
Mike Kantor
  • 1,400
  • 4
  • 24
  • 45
1
vote
2 answers

Sumologic: How to get average time difference between two messages

Having a set of logs like: Log10:[requestId=2][taskId=C][message='End'] Log9: [requestId=2][taskId=C][message='Start'] Log8: [requestId=2][taskId=B][message='End'] Log7: [requestId=1][taskId=B][message='End'] Log6:…
MerLito
  • 101
  • 8
1
vote
3 answers

How to extend AWS CDK with non AWS Resources during deploy

I would like to automate setting up the collection of AWS Application Load Balancer logs using Sumo Logic as documented…
Richard Collette
  • 5,462
  • 4
  • 53
  • 79
1
vote
2 answers

Sumo Logic kubernetes integration requires that no Prometheus exists

I am currently working on integrating Sumo Logic in a AWS EKS cluster. After going through Sumo Logic's documentation on their integration with k8s I have arrived at the following section Installation Steps. This section of the documentation is a…
nabello
  • 716
  • 11
  • 29
1
vote
1 answer

How to exclude spikes from SumoLogic alert?

We have SumoLogic alert that happens if more than 10 errors logged in 60 min. I prefer to have something like:  if there is a spike and all the errors happen in e.g. 1 minute ( consider as issue has been auto resolved ) do not generate alert. How…
Michael Freidgeim
  • 26,542
  • 16
  • 152
  • 170
1
vote
1 answer

Extracting json value from json within a log entry

Using sumologic, how can I perform queries on log entries where the message is partially json (so not entirely)? Example entry: [2020-04-30 02:10:32] production.WARNING: We were rate limited…
Ben
  • 60,438
  • 111
  • 314
  • 488
1
vote
0 answers

Finding all the logs that have the same trace id, but only for failed operations

All my logs have a trace id in them (which identifies a single request inside the infrastructure). Is there any way to search for a keyword, lets say "Error" for example, and get all the logs that contain the keyword "Error", but also, all the log…
pedro_silva
  • 143
  • 2
  • 6
1 2 3
4
5 6 7 8