Sorting
((_collector="AWS-SP-DEV" and _sourceCategory="http input"))
(_sourceHost="/aws/lambda/dev-c4c-student-event-publisher-v1" OR _sourceHost="/aws/lambda/dev-student-queue-publisher-v1" OR _sourceHost="/aws/lambda/dev-database-student-queue-v1" OR _sourceHost="/aws/lambda/dev-database-student-history-queue-v1")
| parse "'level': '*'" as level
| if (level matches "info", 1,0) as Info
| if (level matches "error",1,0) as Error
| where Info=1
| count (Info) group by _sourcehost
For the above above, i tried the result in Coloumn Chart by Sourcehost, However the sourcehost is not in the correct order as i have give in the query.
is there a way to display accordingly be sourcehost in sequence order
-
yes, that doesn't help...
i wanted to be in the below order in chart format :
1._sourceHost="/aws/lambda/dev-c4c-student-event-publisher-v1"2._sourceHost="/aws/lambda/dev-student-queue-publisher-v1"
3. _sourceHost="/aws/lambda/dev-database-student-queue-v1"
4. _sourceHost="/aws/lambda/dev-database-student-history-queue-v1")
Is there a way to rename the sourcehost field?
Please sign in to leave a comment.
Comments
3 comments