topic Re: HTTP error table in Dashboards & Visualizations

Creating a table, but it shows 3 column error msg?

Khanu89 — Tue, 10 May 2022 03:48:53 GMT

I am trying to create a table which shows 3 column error msg, errorcode, and count. my current query is pulling the errorcode/msg in one column and error count individually instead of whole. Please assist.

my Current Query

My current query

Current Output

Screen Shot 2022-05-09 at 8.46.04 PM.png

Expected Output

Screen Shot 2022-05-09 at 8.52.59 PM.png

Re: HTTP error table

VatsalJagani — Tue, 10 May 2022 03:16:08 GMT

@Khanu89 - It's actually an issue with regex (rex) extracting ErrorCode, that it is extracting ErrorCode and error message everything in a single field.

You can try extracting them separately and then you can update your stats to add the error_msg field in the groupby (or by).

I hope this helps!!!

Re: HTTP error table

Khanu89 — Tue, 10 May 2022 05:16:46 GMT

@VatsalJagani Thank you for your input. Can you please elaborate on how can I extract separately?

Re: HTTP error table

VatsalJagani — Tue, 10 May 2022 05:36:57 GMT

| rex field=_raw "%\s(?<ErrorCode>\d+)\s(?<error_msg>.*)\s"

And then you can use

| stats ..... by ErrorCode, error_msg

something like this. Regex could not be valid for all the use cases, I'm just seeing a few examples from the screenshot.