Search count as numerical value for line chart/stacked chart

[reighnman]

Being able to use search count as a numerical value for line charts/stacked charts would be a great feature.

I have a URL filtering dashboard with 2 histograms (allowed requests & blocked requests), that would be better served as a line/stacked chart. I think using the 1m search count as a value would suffice for this purpose or just an option to display a histogram as a line chart and stack

[lennartkoopmann]

Here is a short workaround that you can use until we support this in a better way: If you have any numerical field in the message you can build a chart from that field and set the value to count. This will show the same counts as the histogram.

[reighnman]

I was able to get it close but without being able to change the labels or remove the data points it's a bit unreadable. Good to know though I never would have tried that.

[TinajaLabs]

I think this is what I would be looking for. I use Icinga and I collect metrics for various attributes of hosts, services, etc.

I am not yet a greylog user but I'm trying to understand if it might be useful for what I need. I am looking for a way to count the number of occurrences of events over a certain timeframe and send those values to icinga (or pull them from Icinga, it doesn't matter). For example, if a service is writing something to disk and sends an info entry to a log file, I'm interested in reporting how many times it happened every minute or every hour.

Is it reasonable to expect greylog to help in this situation?

Thanks for any advice, Chris.

PS, I see no forum, so I am putting this here. Apologies if this is not the right place for a question like this.

[reighnman]

Tinja yes graylog could help you with that but unrelated to this issue though :). Try IRC #graylog on freenode for general discussion

[jothoma1]

Hi! I'm interested in this too :)