Created
October 20, 2016 03:52
-
-
Save GeneralistDev/16043a5cb578d4f11809814298d9c751 to your computer and use it in GitHub Desktop.
Sumologic correlationid search
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| _sourceCategory=aws/lambda-logs Message | |
| | json "extractedFields" as extractedFields | |
| | json field=extractedFields "timestamp", "request_id", "correlation_id", "event" | |
| | fields timestamp, correlation_id, event | |
| | where correlation_id = "638a65e6-efba-4679-b722-2bf2c44fdf34" |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment