Dashboards & Visualizations

How to graph HTTP response codes

bryceweb22
Path Finder

I am trying to filter HTTP error codes from my logs and graph the count and percentage in a dashboard.

Thanks ahead of time!

0 Karma

jnudell_2
Builder

Hi Brycewe22,
It would be helpful for you to post a sample of what your events with HTTP response codes look like.

0 Karma

alonsocaio
Contributor

If you want to filter just the HTTP error codes you can try something like:

index=MY_INDEX (HTTP_METHOD=4* OR HTTP_METHOD=5*)

You can use the stats or chart command to get count and percentage from your searches. In the visualizations tab you will be able to choose the chart visualization type to show your results

Examples:

index=MY_INDEX 
| chart count by HTTP_METHOD

index=MY_INDEX 
| stats count by HTTP_METHOD
0 Karma

bryceweb22
Path Finder

what do you mean by HTTP_METHOD?

0 Karma

alonsocaio
Contributor

Actually this will be the field that contains your http codes. You will have to look ate your data sources and logs to find the name of this field.

0 Karma
Get Updates on the Splunk Community!

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...

Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination

Calling all Splunk developers, custom SPL builders, dashboarders, and Splunkbase app creators – the Builder ...

Hunt Smarter, Not Harder: Discover New SPL “Recipes” in Our Threat Hunting Webinar

Are you ready to take your threat hunting skills to the next level? As Splunk community members, you know the ...