Forum Discussion
Dark_Knight666
Bronze III
Bronze IIIElastic Data Ingest: Ep.2 – Filebeat
Hello,
I'm a little confused as to how to go about formulating a query for step 9?
Any advice would be greatly appreciated!
Literally just need to put message : "group" into the KQL search bar
4 Replies
- barney
Literally just need to put message : "group" into the KQL search bar
- Dark_Knight666
barney - Thank you. Can I also please ask if you may have done something similar by trying to answer Q11?
- barney
I didn't do anything that clever - just compared the users returned in your previous query with the analytics dashboard that was used to answer Q7.
- SamDickison
Community Manager
Hmm, I wonder if Ola, Zexceed, Cyb3rM0nK3y, Thomas0akes or darkmacheken could help you, as it looks like they've completed this lab.
