I'm trying to visualise data as table. I want to show errors 404 with route as message. How can I do that? I can get a count, but not message.
Bucket based on terms for the route field.
It looks like you are not parsing the message, which means you can not aggregate over components. Have a look at the Filebeat Nginx module as this can do this for you.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.