0 Replies Latest reply on Jan 24, 2017 2:12 AM by ongyp

    Group by host for correlation

    ongyp

      I have encounter issues where i need to correlate events from 2 data sources but my hostname is not the same. e.g. hostname.gov.sg and hostname.

       

       

      How can i go about correlating events from 2 different data sources. Can i use variables to extract out the hostname from the FQDN.

       

       

      Thanks