I am trying to filter HTTP error codes from my logs and graph the count and percentage in a dashboard.
Thanks ahead of time!
Hi Brycewe22,
It would be helpful for you to post a sample of what your events with HTTP response codes look like.
If you want to filter just the HTTP error codes you can try something like:
index=MY_INDEX (HTTP_METHOD=4* OR HTTP_METHOD=5*)
You can use the stats
or chart
command to get count and percentage from your searches. In the visualizations tab you will be able to choose the chart visualization type to show your results
Examples:
index=MY_INDEX
| chart count by HTTP_METHOD
index=MY_INDEX
| stats count by HTTP_METHOD
what do you mean by HTTP_METHOD?
Actually this will be the field that contains your http codes. You will have to look ate your data sources and logs to find the name of this field.