QuestionQ84

VerifiedEvent Search

Your organization has detected a malicious Scheduled task that runs every 5 minutes.

Which LogScale event-search function can quickly identify and display the unique hosts impacted by the malware?

Explanation

groupBy() groups events by the specified host field and returns a result for each distinct host, making the affected hosts directly visible. Without an explicit aggregate function, it also supplies an event count for each group.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!