I am trying to create a pie chart that would show difference error codes by category.
Here is my current query:
index= my_index
| stats last(_time) as _time last(Message) as Message by Type
| stats count by Type
| eval ErrorCode=443
| eval ErrorrCode=503
I'd like to pull in all errors without specifying the ErrorCodes as I have in my query.
Can you show us example of the data your working with?
what sort of data would you like me to share?
The data your trying to create the Piechart with