Hello All,
I want to create in Canvas a pie chart that replicates the visualization "Top URLs by response code[Filebeat Apache] ECS".
I have for the Split chart the following ES SQL:
SELECT url.original as url, count() AS ct
FROM "filebeat-"
WHERE log.file.path='/log_otrs/apache2/access.log'
GROUP BY url
ORDER BY ct DESC LIMIT 5
For the Split slices I have the following ES SQL:
SELECT http.response.status_code as status_code, count() as ct
FROM "filebeat-"
WHERE log.file.path='/log_otrs/apache2/access.log' and status_code is not null
GROUP BY status_code
ORDER BY ct DESC LIMIT 5
How can I implement this? Thank you.