| sum ( T2_Messages ) as % "Total Messages", count_distinct ( User ) as % "Members Posted Messages" by Workspace, Channel, % "Team Members" | most_recent ( Name_withtime ) as Name by User, Workspace | where Bot matches "false" and ! ( Name matches "slackbot" ) and Deleted matches "false" | json "id", "name", "deleted", "is_bot", "teamName" as User, Name, Deleted, Bot, Workspace nodrop | where [ subquery: "logType" : "UserLog" | fields Workspace, Channel, User, % "Team Members", T2_Messages | T2_Workspace as Workspace | T2_ID as User | T1_Channel as Channel | count_distinct ( Time ) as Messages by ID, ChannelId, Workspace ) as T2 on T1. | most_recent ( Members_withtime ) as Members by Channel, ChannelId, Workspace ) as T1, ( "logType" : "ConversationLog" | json "user", "userName", "type", "subtype", "ts", "text", "channelId", "channelName", "teamName" as ID, User, Type, SubType, Time, Text, ChannelId, Channel, Workspace nodrop | json "channel_name", "channel_id", "teamName", "members" as Channel, ChannelId, Workspace, Members The following table provides sample log messages for the different log types. The availability of all types of logs is determined by the slack plans.
Sumo Logic’s Slack collector enhances the logs by adding a few metadata fields so the raw logs from Slack APIs might differ in format. The Slack App utilizes the following log types:
Slack is a cloud-based set of software tools and online services that provide for secure collaboration across teams, departments, offices, and countries.
The app is focused on public channels only. The Sumo Logic App for Slack provides monitoring and data analytics for Slack users, channels, access logs for workspaces with free, standard, plus, and enterprise plans.
0 kommentar(er)
