Whenever someone calls my rest service, the event gets logged into the logs like so:
callerId:1324
How do I create a panel on my dashboard that calculates the total number of calls made and breaks it down by number of times called by particular id's. So in plain english it would give the following information: "Your app was called 10 times today, 5 times by 1324, 3 times by 3948, and 2 times by 1902.
Something like this?
search for your events | top 0 callerId | appendpipe [stats sum(*) as *] | sort 0 - count
Something like this?
search for your events | top 0 callerId | appendpipe [stats sum(*) as *] | sort 0 - count
Does the search callerId
return the events you need?
Do the events already have the callerId
field extracted?
You'll need a yes to both in order to get results.