Getting the max of the count by field for use on dashboard

[nicks1993]

Here is what I'd like to do. I have my kibana logging by log level for example: warning, error, debug etc for each application running on the cluster.
I'd like to get the application with the most error logs and display that on the dashboard as text or something similar. Is that possible? Do I have to make a scripted field for this?
thanks

[bhavyarm]

Hi,

You can chose an aggregation which can get the most error logs depending the field type and then use a filter or input controls to display what you want on the dashboard.

In this example are I created an area chart with histogram of time and terms of machine.os as my x-axis.

I added it to dashboard and filtered it on iOS.

Hope this helps.

Thanks,
Bhavya

[nicks1993]

Thanks for the reply