Hey Paul/Devs, How do we enable drilldown in this visualization? Can we not have event details on-click? And can we not enable hovering over the bars? Thanks, Sagar Jaiswal ... View more

I've a log to extract key value pairs from but I'm unable to extract all of them Sample log: 2017-12-19 19:33:55,848 LL="DEBUG" CR="abq_asdaasd_adasdq_DAS" RE="abd" DE="abc" TR="tomcat-http--41" LN="xyz" TYPE="IN-RESPONSE" BODY="{"key":{"key1":"value1","key2":"value2","dateAndTimeTransmission":"2017-12-19T19:33:54.000Z","key3":"value3","key4":"value4","key5":"value5","key6":"value6","key":2,"key":{"key7":"value7","key8":"value8","key9":"value9"},"key":{"key":[{"key10":"value10","key11":"value12","key13":"value13"},{"key14":"value14","key":"value","key":"value"}]},"key":"value","key":"value"}}" I'm using the query ----- > index=xyz ( $searchKey$ ) | extract pairdelim="," kvdelim=":" | dedup key ------ then followed by putting the value in the table. I require key10,value10 and key11,value11 I'm able to extract key11,value11 but my query is not extracting key10,value10 .. maybe due to the [{ Can someone please help? ... View more

The scenario is that I enter a search term, in my case it a CR - correlation ID that pulls the whole journey of the call. The logs contain different information like the URL it hits, the origin, the target, the time taken, http status code, http method etc. I want to create a dashboard which displays the flow of the call of which URL/Server its hitting at each step with the success or error code. Has any one come across such dashboard or knows how to create one? ... View more

I've a log in which instead of X=Y, it is present as "X":"Y". How do I extract X as a field and Y as its value? ... View more