|
I would like to tag various time periods as "scheduled maintenance," so that my application error searches ignore events during these periods. The maintenance periods are irregular and of different durations. If I could transform these periods into custom fields, that would be ideal, I think. Then I could do something like
Does anyone have a suggestion on how I could achieve this goal? |
One Answer:
|
I don't know of such support directly. I think I would probably approach it using a dynamic lookup. Your dynamic lookup script could, based on combinations of _time and host, output a field for A good place to start might be |
