Unable to change the label in timelion

I want to change the label to simple string like "
About to send heartbeat from server to agent 192.168.2.217 21 172.168.1.135 i.e the actual value of ip_log.keyword,i am trying the below but it doesn't seem to be working,please help

.es(index="agentlogs30",timefield="log_day",split=ip_log.keyword:19,q="agentIpAddress:192.168.2.217" ).label("my very own static text [$1]","^.* > ip_log.keyword:(\S+) > .*")

Hmm, what are you seeing instead? A slight variation on your example worked for me, so I think you are headed in the right direction. I don't see clearly why it isn't working for you.

Here is my test:

I am not sure either,why this isn't working for me

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.