Hi @H2ck1ngPr13sT , if you want your count for one day, you could use something like this: index=monitor name="Manager - Error" text2.value="*Rerun" text1.value IN ("*Load Balancer*", "*Endpoints*...
See more...
Hi @H2ck1ngPr13sT , if you want your count for one day, you could use something like this: index=monitor name="Manager - Error" text2.value="*Rerun" text1.value IN ("*Load Balancer*", "*Endpoints*") earliest=-1d latest=now
| rename text1.value AS text1_value
| stats
count(eval(searchmatch(text1_value,"Load Balancer"))) AS LoadBalancer
count(eval(searchmatch(text1_value,"Endpoints"))) AS Endpoints if instead yu want the values for each day in the last 7 days, you could use something like this: index=monitor name="Manager - Error" text2.value="*Rerun" text1.value IN ("*Load Balancer*", "*Endpoints*") earliest=-17 latest=now
| rename text1.value AS text1_value
| eval type=if(searchmatch(text1_value,"Load Balancer"),"LoadBalancer", "Endpoints")
| timechart span=1d count BY type Ciao. Giuseppe