katerobson08
Results
1
comments of
katerobson08
Hi, thanks for the quick response. Query provided by @genecrouch4 works: Query 1 - didn't work (where Message matches regex @'(kernel:\s+\[.+\]\s+)?IN=\w+\s+OUT=\w+\s+') Query 2 - didn't work(| where Message matches regex...