10-24-2007 12:12 PM - edited 03-09-2019 07:05 PM
Hello,
When one is running a QUERY/REPORT in MARSv4.3 how can I go about identifying which reporting device is generating the events? I have several devices pumping logs to the MARS but I can't seem to tell which one is generating which event.
For example -
I run a query against all Event Types ranked by Sessions for the last 10 minutes. I submit in-line. The results are sorted etc but I can't figure out how to drill down and see which IP is causing the event.
Thanks
Solved! Go to Solution.
10-25-2007 02:21 PM
If you run a query on the individual event, it will show you the reporting device
10-25-2007 07:05 AM
any ideas?
10-25-2007 02:21 PM
If you run a query on the individual event, it will show you the reporting device
10-26-2007 06:43 AM
Thanks for the response. It works
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: