Need help on creating a table of data in a dashboard using logs

[Karthi746]

Hi,

I currently have an azure managed elastic cloud which contains logs from various sources. I have been developing a dashboard with all the data available in the logs. I currently need help in creating a table visualization as shown in the image attached.

All the details mentioned in the image is available in the logs. Appreciate the help.

[Christian_Dahlqvist]

This is not my area, but if anyone is going to be able to help you out you most likely will need to share a sample of what the data looks like and how it is mapped. It is also generally also always a good idea to state which version you are using.

[Karthi746]

Thanks for the info.
The version is: 8.17.1

These are the fields which I would need to be in the table
fields.@timestamp
fields.user_id
message
fields.resources.resourceType
fields.resources.resourceName

Mapping is not an issue, However I need a visualization type or idea on how to display all the fields in form of a table.

[stephenb (Stephen Brown)]

Does your table have any aggregations or is it simply a grid with the fields you have selected

If it's simply a grid with the fields you have selected.

Go to discover, you can put those fields in the columns and save that as a saved search and then use that in any dashboard you like.

[kishorkumar]

How to Create a Table in Lens from the Visualize Library

• Go to Observability → Visualize Library.

• Click on "Create visualization" and choose "Lens" as the visualization type.

• In Lens, select "Table" from the available visualization types.

• Pick the Data View you want to use from the dropdown at the top.

• On the left-hand side, drag and drop the fields you want into the Rows section.

• If a Metric column appears and you don’t want it:

  • Click on the metric column.
  • Toggle "Hide column" to ON.

• Once your table looks the way you want:

  • Click "Save".
  • Choose to save it to the library or add it to an existing/new dashboard.

Final Result will look like