Skip to content

Instantly share code, notes, and snippets.

@bfulton

bfulton/swipely-sumo-logic-blog-post-example-01.sh

Last active August 29, 2015 14:07
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bfulton/6482ba8150ab69c54adb to your computer and use it in GitHub Desktop.
Save bfulton/6482ba8150ab69c54adb to your computer and use it in GitHub Desktop.
Download ZIP
Raw
swipely-sumo-logic-blog-post-example-01.sh
# search for 5 most displayed icons
query='
gif or jpeg or png |
parse regex "icon[^\w]+(?<image_url>http[^\\]+)\\" |
count by image_url | order by _count | limit 5
'
sumo -q "$query" \
--from '2014-09-25T18:00:00' --to '2014-09-25T18:59:59' \
--time-zone 'UTC' \
--records | \
cut -d '"' -f 4 | xargs open # and open images in browser
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment