November 2018
Beginner
298 pages
7h 51m
English
Chart is a transforming command that returns your results in a table format. The results can then be used to display the data in a chart, such as a bar, column, line, area, or pie chart. You have to use one of three statistical functions with the chart command: stats-agg-term (as in the stats command), sparkline-agg-term (a sparkline aggregation function), or eval-expression (as in the eval command). The chart command is similar to the stats command, with some differences.
The basic syntax is as follows:
... | chart <chart-options> <stats or aggregation function> BY <column-split>or... | chart <stats or agg function> OVER <row-split> BY <column-split>
Some examples of the chart command include the following:
index=weblogs_90d_eidx ...
Read now
Unlock full access