# Reporting the most common log errors

**URL:** https://discuss.elastic.co/t/reporting-the-most-common-log-errors/24740
**Category:** Kibana
**Created:** [July 1, 2015, 3:02pm UTC](https://discuss.elastic.co/t/reporting-the-most-common-log-errors/24740 "2015-07-01T15:02:05Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![twall](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/twall/32/3540_2.png) [@twall](https://discuss.elastic.co/u/twall)
#### Post date: [July 1, 2015, 3:02pm UTC](https://discuss.elastic.co/t/reporting-the-most-common-log-errors/24740/1 "2015-07-01T15:02:05Z")

</div>

I'm trying to understand what's involved in obtaining the "Quick Counts" in kibana for a given "selected field". For example, my "message" field nominally represents logged errors, and the "Quick Counts" is more or less a representation of the most common errors.

I'd like to export a snapshot of this for inclusion in a different automated report.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/e/e59e04bf3854fc31d707482e029dfb2448cfc462.png)

---

<div class="post-metadata">

### Author: ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)
#### Post date: [July 1, 2015, 3:58pm UTC](https://discuss.elastic.co/t/reporting-the-most-common-log-errors/24740/2 "2015-07-01T15:58:03Z")

</div>

"Quick Count" is just based on the first 500 records returned in the Discover tab. It's meant to give you a preview of the types of values in each field based on a small portion of the total data set.

> [@twall](#):
>
> I'd like to export a snapshot of this for inclusion in a different automated report.

If you'd like to see and export the most common errors, I'd recommend using Data Table in Visualize and running a Terms aggregation on the whole data set (or the portion you're interested in). There, you can also modify how many top N to return (default is 5). After that, you can export that table to CSV right from Visualize.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 2:17pm UTC](https://discuss.elastic.co/t/reporting-the-most-common-log-errors/24740/3 "2017-07-06T14:17:12Z")

</div>


