Visualization for a single log message
I would like to create a visualization of bar chart and I'm have a single log message containing fields name=xyz, total = 100, success = 50, failure = 50. bar chart should show y axis with counts present in log message with x axis as name. please let me know if it is possible to do.
-
Hello Sai,
This is possible. You would first need to parse those fields from your message. The easiest way to do this is to use "parse anchor", follow this link for how to use this https://help.sumologic.com/05Search/Search-Query-Language/01-Parse-Operators/01-Parse-Predictable-Patterns-Using-an-Anchor.
Once you have the fields properly parsed, you need to do an aggregate operation. The most common one is to do a count, https://help.sumologic.com/05Search/Search-Query-Language/aaGroup/count%2C-count-distinct%2C-and-count-frequent, but for other aggregate operators, please go to https://help.sumologic.com/05Search/Search-Query-Language/aaGroup.
Once you have all this in place, you can select the type of chart you want to display. For more information about the bar chart, please go to https://help.sumologic.com/Visualizations-and-Alerts/Dashboards/Chart-Panel-Types/Bar-Charts. For information on how to create a bar chart on the New Dashboards, please go to https://help.sumologic.com/Visualizations-and-Alerts/Dashboard_(New)/Panels/Bar_Charts.
Give this a try, if you need further assistance with this, then please open a ticket with the Support team and we will assist you further.
Best regards,
Jorge
Please sign in to leave a comment.
Comments
1 comment