Notes

## Get prod grass logs with `Profile`
```shell
./env/bin/python dd_logs.py "source:prod-ows-grass Profile" --range 1d
```

Get counts (Top 5)
```shell
grep -oE 'Profile: [^ ]+ [^ ]+' logs.txt | sed 's/Profile: //' | sort | uniq -c | sort -rn
```

Example output:

```text
2623 OrchAdminProfile 3834
2568 OrchAdminProfile 2889
2414 OrchAdminProfile 3548
1755 OrchAdminProfile 1049
1457 OrchAdminProfile 947
```

## Get WAF logs with orchard-profile-id
```shell
./env/bin/python dd_logs.py "source:waf @httpRequest.headers.orchard-profile-id:*" --range 1d --json -o ./waf.json 
```

Get counts
```text
jq -r '.[].attributes.attributes.httpRequest.headers["orchard-profile-id"] // empty' waf.json | sort | uniq -c | sort -rn | head -20
```