Hello,
I have log messages that look like this:
Handled MessageTypeA in 10ms
Handled MessageTypeB in 23ms
Handled MessageTypeA in 5ms
Handled MessageTypeB in 27ms
I would like a line chart that shows me how long the messages are taking to process by each message type.
i.e. there would be 2 lines on the chart, one for MessageTypeA between values 10 and 5, and one for MessageTypeB between values 23 and 27.
This was my attempt:
{my search}| rex field=_raw "Handled (?\S*) in (?\d+)"| timechart list(time) by msg
It seems to plot something, but not anything relating to the data I've got.
... View more