VirtualPITA & VirtualPIE

index=syslog sourcetype=vmkwarning.log 
| rex field=message "(?<time_Stamp>\d+-\d+-\d+T\d+:\d+:\d+\.\d+Z)\s(?<host_Name>.*)\svmkwarning:\s(?<metadata>.*)\)(?<severity_Level>\w+):\s(?<event_Message>.*)"
| search (event_Message="* image profile with validation disabled. *" OR event_Message="* image profile bypassing signing and acceptance level verification. *" OR event_Message="* vib without valid signature, *")
| table time_Stamp host_Name severity_Level event_Message