Need advice

[emilio]

Dear all,

I need some advice.

I have two hosts and i would like to create visual dashboard on exceptions on them.

So, i have created query, but can't visualize my query. Please help

[warkolm (Mark Walkom)]

@emilio

So, i have created query, but can't visualize my query.

What specific problems are you having?

[emilio]

Mark, imagine i have a lot of hosts and logs from them on ES. So, i need create visualization of exceptions on every host. What should be aggregations of Y-ray and X-ray, bucket aggregations?

field for host is host, field for log content is message.