Anyone, Help me about vizualization with my log pattern!

Elastic Stack Kibana
1

Hi there!
Here is my complete configuration of the elk stack for my stub.

and more...

My question is:

How can I count each errorCode and fill result to a vertical graph vizualize with the corresponding errorCode being the bucket?

So, anyone could you help me solution with whole my everything above i provided? And i would like to implement it into my Kibana. Thank you so much!

2

Hi @quangdv.6466
You didn't mention what version of kibana you're in, but assuming you're on 7.9.3 or 7.10 you could use lens to achieve what you need.

I'll try to walk you through similar example:

  1. Go to Visualize -> Lens.

  2. Inside the app, on the left side, choose the index pattern you want to work.

  3. From the left side, move the field 'errorCode' to the right horizontal axis (x-axis).

  4. Click on the freshly created 'Top values of errorCode' and change the number of values in the flyout that will open (depending on how many different errorCodes you expect):

    image
    image664×658 35.1 KB

  5. Move the field 'Records' to Vertical axis (Y axis)

  6. Remember about changing the timepicker range if no data is shown.

    image
    image2872×1452 386 KB

I hope it's helpful!

3

The first one, Thanks Marta, i'm using Kibana 7.9.3. And, i know what you mean.
But the issue is that the errorCode is inside the message field. I don't know how I can get the errorCode from inside the message field out for statistics and fill whole result into vertical chart in lens.
Hope you can support me about this issue. Many thanks!

4

Oh ok, I see the problem now. The only option I see is to ingest your data differently so you have a separate field errorCode that you can then visualise.
Maybe someone else can give a better answer, but I don't think it's possible this way.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.