Dashboards & Visualizations

How to graph HTTP response codes

bryceweb22
Path Finder

I am trying to filter HTTP error codes from my logs and graph the count and percentage in a dashboard.

Thanks ahead of time!

0 Karma

jnudell_2
Builder

Hi Brycewe22,
It would be helpful for you to post a sample of what your events with HTTP response codes look like.

0 Karma

alonsocaio
Contributor

If you want to filter just the HTTP error codes you can try something like:

index=MY_INDEX (HTTP_METHOD=4* OR HTTP_METHOD=5*)

You can use the stats or chart command to get count and percentage from your searches. In the visualizations tab you will be able to choose the chart visualization type to show your results

Examples:

index=MY_INDEX 
| chart count by HTTP_METHOD

index=MY_INDEX 
| stats count by HTTP_METHOD
0 Karma

bryceweb22
Path Finder

what do you mean by HTTP_METHOD?

0 Karma

alonsocaio
Contributor

Actually this will be the field that contains your http codes. You will have to look ate your data sources and logs to find the name of this field.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...