Dashboards & Visualizations

How to graph HTTP response codes

bryceweb22
Path Finder

I am trying to filter HTTP error codes from my logs and graph the count and percentage in a dashboard.

Thanks ahead of time!

0 Karma

jnudell_2
Builder

Hi Brycewe22,
It would be helpful for you to post a sample of what your events with HTTP response codes look like.

0 Karma

alonsocaio
Contributor

If you want to filter just the HTTP error codes you can try something like:

index=MY_INDEX (HTTP_METHOD=4* OR HTTP_METHOD=5*)

You can use the stats or chart command to get count and percentage from your searches. In the visualizations tab you will be able to choose the chart visualization type to show your results

Examples:

index=MY_INDEX 
| chart count by HTTP_METHOD

index=MY_INDEX 
| stats count by HTTP_METHOD
0 Karma

bryceweb22
Path Finder

what do you mean by HTTP_METHOD?

0 Karma

alonsocaio
Contributor

Actually this will be the field that contains your http codes. You will have to look ate your data sources and logs to find the name of this field.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...