Top URLs by response code[Filebeat Apache] ECS

Hello All,

I want to create in Canvas a pie chart that replicates the visualization "Top URLs by response code[Filebeat Apache] ECS".

I have for the Split chart the following ES SQL:

SELECT url.original as url, count() AS ct
FROM "filebeat-
"
WHERE log.file.path='/log_otrs/apache2/access.log'
GROUP BY url
ORDER BY ct DESC LIMIT 5

For the Split slices I have the following ES SQL:

SELECT http.response.status_code as status_code, count() as ct
FROM "filebeat-
"
WHERE log.file.path='/log_otrs/apache2/access.log' and status_code is not null
GROUP BY status_code
ORDER BY ct DESC LIMIT 5

How can I implement this? Thank you.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.