How to integrate Other in my search?

azeryassine · ‎03-08-2022

hello,

I have a chart in my bashboard but when i click on Other, I don't have the results.

It's possible to have the logs of the hosts when I click on other?

index=firewall AND sourcetype=cisco:ios AND host="*r01p" OR "*r01s"| chart count by host | rename count as NumberEvent

it's not possible to use the option useother=true for chart ?

gcusello · ‎03-08-2022

you should configure drilldown in another dashboard and in the secondary dashboard set the condition

| eval host=if(host="Other","*",host)

Ciao.

Giuseppe