Minecraft

0 devster7 player player sourcetype=minecraft_logs | top player | fields player 0

sourcetype=minecraft_logs $field2$ died | stats count $field1.earliest$ $field1.latest$ 1 value none all 0 ["0xf1813f","0xf1813f"] [0] progressbar 1 1 0 1 medium standard absolute respawns after 1 1 sourcetype=minecraft_logs player=$field2$ actionType=PlayerBedEnterEvent | stats count $field1.earliest$ $field1.latest$ 1 value none all 0 ["0x006d9c","0x006d9c"] [0] progressbar 1 1 0 1 medium standard absolute nights slept after 1 1 sourcetype=minecraft_logs player=$field2$ actionType=PlayerGameModeChangeEvent CREATIVE | stats count $field1.earliest$ $field1.latest$ 1 value none all 0 ["0x53a051","0xdc4e41"] [0] progressbar 1 1 0 1 medium standard absolute times cheated after 1 1 sourcetype=minecraft_logs player=$field2$ action=placed | eval blockName=replace(blockName,"_"," ") | stats count by blockName $field1.earliest$ $field1.latest$ 1 ellipsisNone 0 visible visible visible none linear none linear none 0 inherit pie 50 10 area gaps none 0 default shiny all 0 0 ellipsisMiddle standard right 2 progressbar 0 1 medium sourcetype=minecraft_logs player=$field2$ action=broke | eval blockName=replace(blockName,"_"," ") | stats count by blockName $field1.earliest$ $field1.latest$ 1 ellipsisNone 0 visible visible visible none linear none linear none 0 inherit pie 50 10 area gaps none 0 default shiny all 0 0 ellipsisMiddle standard right 2 progressbar 0 1 medium sourcetype=minecraft_logs player=$field2$ action=consumed | rex field=_raw "^(?:[^ \n]* ){5}(?P<foodItem>.+)" | eval foodItem=replace(foodItem,"_"," ") | chart count by foodItem $field1.earliest$ $field1.latest$ 1 ellipsisNone 0 1 Food Item visible collapsed visible none linear auto linear none 0 inherit bar 50 10 area gaps all 0.01 default shiny all 0 0 ellipsisMiddle standard none 2 progressbar 0 1 medium sourcetype=minecraft_logs player=$field2$ action=breaked | rex field=_raw "^(?:[^ \n]* ){5}(?P<tool>.+)" | eval tool=replace(tool,"_"," ") | chart count by tool $field1.earliest$ $field1.latest$ 1 ellipsisNone 0 1 Tool visible collapsed visible none linear none linear none 0 inherit bar 50 10 area gaps all 0.01 default shiny none 0 0 ellipsisMiddle standard none 2 progressbar 0 1 medium sourcetype=minecraft_logs player=$field2$ command | rex field=_raw "^(?:[^:\n]*:){4}\s+(?P<Command>.+)" | eval Time=strftime(_time,"%Y-%m-%d %H:%M:%S") | table Time, Command | sort by -Time | head 10 $field1.earliest$ $field1.latest$ 1 20nonecellfalseprogressbarfalsefalsetrue sourcetype=minecraft_logs player=$field2$ action=said | rex field=_raw "^(?:[^ \n]* ){4}(?P<Message>.+)" | eval Time=strftime(_time,"%Y-%m-%d %H:%M:%S") | table Time, Message | sort by -Time | head 10 $field1.earliest$ $field1.latest$ 1 20nonecellfalseprogressbarfalsefalsetrue