This guide dives into why APL could be a superior choice for your data needs, and the differences between Sumo Logic and APL.
|
) operator for chaining commands, and it provides a richer set of functions and operators for more complex queries.
from
and to
fields. For example, if a raw event contains From: Jane To: John,
then from=Jane and to=John.
Sumo Logic:
src
, size
, and URL
, even when the size
field may be absent from the log message.
Sumo Logic:
status_code
, grouped into one-hour timeslices, and then transpose status_code
to column format. This will help us understand the frequency and timing of different status codes.
Sumo Logic:
200s
, 300s
, 400s
, and 500s
together, we are also groupint the method requests with the GET
, POST
, PUT
, DELETE
attributes. This will provide an overview of the response status distribution.
Sumo Logic:
num
operator to convert these strings into numerical format, facilitating easier analysis and comparison.
Sumo Logic: