I'm trying to create a single visulization for the following:
- I run one search filter to grab all log entries where the 'FeedFileName' property isn't empty. This collates log entries for when the system receives files.
- Based on the above each log entry has a FeedFileName which could be filtered down further to *f1.xml or *f2.xml and so on.
- Every log entry also has a milisecond value in field 'TimeSinceCreation'
I would like to put a metric on my graph for each file type i.e. f1.xml, f2.xml, f3.xml creating a graph for latency on a per file type basis rather than having to create separate visulizations (which I initially have done).
The issue I have is I'm not sure how I can filter the entry down to a single FeedFileName entry on the visulization.
Any help would be most appreciated.