I have extracted the 500 error as "server_error" and I want to count the total number of server_error by host and show the count and also show the trend of the server_error over time
example query :
index=abc |chart count(eval(status_error=500)) as internal_errors by host
Hi @navd
Am not sure, if i understood your question correctly,
index=abc | timechart span=5m count(server_error) by host.
change the span to needed like 1m,5m,10m,1h,1d.
Thanks
Hi @navd
Am not sure, if i understood your question correctly,
index=abc | timechart span=5m count(server_error) by host.
change the span to needed like 1m,5m,10m,1h,1d.
Thanks