Forum Discussion

Dark_Knight666's avatar
2 months ago

Elastic Data Ingest: Ep.6 – Winlogbeat

Hello,

I'm a little stumped by Q7 as I'm sure I have the correct values for 'application channel events' as being 5.0% and the question after, Q8 is asking for 'system channel events' and even that at 95.0% isn't correct? 

I also just tried 5% and 95% to no avail.

 

4 Replies

      • netcat's avatar
        netcat
        Icon for Silver III rankSilver III

        If there were only 5 events, then elastic would show 0.3% in that view. You need to enter the number of events - elastic will show you these with just one more click at the right position. I guess I wasn't clear in the previous answer.

  • Thank you netcat. Now a little stuck on Q10. Logically it appears this is the place I should be looking but obviously this doesn't seem to be the case....