Forum Discussion
Dark_Knight666
Silver I
2 months agoElastic Data Ingest: Ep.2 – Filebeat
Hello, I'm a little confused as to how to go about formulating a query for step 9? Any advice would be greatly appreciated!
- 2 months ago
Literally just need to put message : "group" into the KQL search bar
SamDickison
Community Manager
2 months agoHmm, I wonder if Ola, Zexceed, Cyb3rM0nK3y, Thomas0akes or darkmacheken could help you, as it looks like they've completed this lab.