Read our Query language. documentation for more information on how to write search queries.
Overview
Visualizations is a feature that allows users to displayed the data returned from searches. Using the search query editor you can select from List, Timeseries, Table, Top List, Pie Chart and Tree Map views to visualize your data.List
List displays the logs that are returned from your search query. This alows you to review a group of log events. From here you can toggle to full screen mode, table view and sort results by oldest first. In List view selecting the options menu will display several toggle features which you can choose from the following options: Timeline graph, Wrap lines, date column, content column. From this option page you can also add further columns based on your log data results.
Timeseries
Visualize your log data over a selected timeframe. Toggle between viewing as Line graph or Bar chart. Adding further groups, the timeline will plot and graph the key and values.
Table
A table view in log search is a way to represent log data in a structured, tabular format. This format allows users to quickly scan and understand the data by organizing it into rows and columns depending on the fields selected.
Pie Chart
A pie chart can be used to visualize the distribution of various log events or categories, making it easier to understand the relative frequency or importance of different types of log data.
Top List
A top list chart is used to display the most frequent or critical log events, errors, or sources, helping prioritize issues that need attention.
Tree Map
Tree maps help visualize hierarchical data, showing proportions and relationships within the data set and gain valuable insights into the hierarchical structure and distribution of your log data, aiding in performance monitoring, resource allocation, and issue detection.