Forum Discussion
Solved
Elastic Data Ingest: Ep.2 – Filebeat
Hello, I'm a little confused as to how to go about formulating a query for step 9? Any advice would be greatly appreciated!
Literally just need to put message : "group" into the KQL search bar
SamDickison
Community Manager
Community ManagerHmm, I wonder if Ola, Zexceed, Cyb3rM0nK3y, Thomas0akes or darkmacheken could help you, as it looks like they've completed this lab.
