Timelion .label() not working

Elastic Stack Kibana
1

kibana
kibana.png1546×659 105 KB

I want to change the label to just contents of ip_log.keyword like below.

About to send heartbeat from server to agent 192.168.2.217 21 172.168.1.135,i have tried below but it doesn't seem to be working ,please help

.es(index="agentlogs30",timefield="log_day",split=ip_log.keyword:19,q="agentIpAddress:192.168.2.217" ).label("my very own static text [$1]","^.* > ip_log.keyword:(\S+) > .*")

2

This is a duplicate of Unable to change the label in timelion I believe? Unless I missed how this question differs?

3

Yes,first time when i posted i got an error,hence had to repost it,sorry for the trouble

4

try...

.label(regex="^.* ip_log.keyword:(.+) > .*$", label="$1").
5

Worked perfectly thanks a lot :slight_smile:

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.