((_collector="AWS-SP-DEV" and _sourceCategory="http input"))
(_sourceHost="/aws/lambda/dev-c4c-student-event-publisher-v1" OR _sourceHost="/aws/lambda/dev-student-queue-publisher-v1" OR _sourceHost="/aws/lambda/dev-database-student-queue-v1" OR _sourceHost="/aws/lambda/dev-database-student-history-queue-v1")
| parse "'level': '*'" as level
| if (level matches "info", 1,0) as Info
| if (level matches "error",1,0) as Error
| where Info=1
| count (Info) group by _sourcehost
For the above above, i tried the result in Coloumn Chart by Sourcehost, However the sourcehost is not in the correct order as i have give in the query.
is there a way to display accordingly be sourcehost in sequence order
Please sign in to leave a comment.