Selecting & Filtering Fields
LogScale allows selecting single fields and offers searching and filtering on those fields.
Click on a field in the Fields panel (Figure 54, “Fields Panel”) for example, #severity in the example. A window opens with the list of values found and the number of occurrences for each.
Figure 56. Selecting Fields
Click the ⋮ icon next to each field name to get several filtering options.
Figure 57. Filtering Options
Select one of the options, for example,
→ will group events by the value of that field, → will run thetimeChart()
function in the Query editor to show events that have that field grouped into series and plotted in a timechart.
More filter options and interactions with fields are available for example, exclude () or include (⊜) in the search all events that have the selected field. See Field Interactions.
When the menu is opened for Field Interactions with live queries, the Fields panel flyout will display a fixed list of top values. The top values are kept from the point in time when the menu was opened.