When performing a search I frequently search across multiple firewall logs and use the group by option to look at high frequency sources. Today I was wanting the get a count for the number of records for each source log. For example how many failed logon attempts were made to each specific firewall. We have each firewall reporting into a different log source. So, is there a way to groupby the log sources?
thanks,
andy