Dashboards & Visualizations

How to graph HTTP response codes

bryceweb22
Path Finder

I am trying to filter HTTP error codes from my logs and graph the count and percentage in a dashboard.

Thanks ahead of time!

0 Karma

jnudell_2
Builder

Hi Brycewe22,
It would be helpful for you to post a sample of what your events with HTTP response codes look like.

0 Karma

alonsocaio
Contributor

If you want to filter just the HTTP error codes you can try something like:

index=MY_INDEX (HTTP_METHOD=4* OR HTTP_METHOD=5*)

You can use the stats or chart command to get count and percentage from your searches. In the visualizations tab you will be able to choose the chart visualization type to show your results

Examples:

index=MY_INDEX 
| chart count by HTTP_METHOD

index=MY_INDEX 
| stats count by HTTP_METHOD
0 Karma

bryceweb22
Path Finder

what do you mean by HTTP_METHOD?

0 Karma

alonsocaio
Contributor

Actually this will be the field that contains your http codes. You will have to look ate your data sources and logs to find the name of this field.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...