Forum Discussion
Specific query - question
Hi, I need assistance please. Given the following query: F5_CL | where TimeGenerated >= ago(3m) //change to required time | extend RawData=split(RawData, '##') //split all raw data to specific ...
Can you move this line BEFORE the summarize
| where responseStatus != "403" and responseStatus != "404" and responseStatus != "503" and remote_address != ""
then have this line afterwards the summarize?>
| where count_ > 150
| where responseStatus != "403" and responseStatus != "404" and responseStatus != "503" and remote_address != ""
then have this line afterwards the summarize?>
| where count_ > 150
CliveWatson
Wow!
It works, Thanks!!
