We have an index called syslog and we want to capture certain errors and report them in a dashboard with a graph as well as a table below that . Was wondering how to do that . I tried to add a dashboard and a panel but it only shows the graph.
Example
index=log host=pprdabcdek01 "reports path is down" this works great for one host
index=log host=pprd*k* OR host=pprd***l "tur checker reports path is down"| timechart count by host (This also works great but not sure if it is efficient) . Woudl like a better query that will cover more hosts like
pprdefghk01 or pprdabcask04 or pprderedbl01 or pprdrrsasl04 etc .....
... View more