Display Different Statuses

In this scenario, the Table widget counts events for the different HTTP methods, which have registered HTTP status errors, like this:

Screenshot showing a table widget with three columns (method, status, count) where status values display color-coded cells with red indicating error codes and teal showing success counts

Figure 246. Count by Status


  1. From the Search tab, type this query in the Query Editor:

    logscale
    groupBy([method, status])

    A table is created that has fields method, status and _count as its columns.

  2. Save your widget as explained at Create Widgets

  3. Click the menu icon on top-right of the widget and select Styling, the Styling panel is displayed:

    Screenshot showing the Styling panel for table formatting with columns section, formatting options, and cell colors configuration displaying threshold ranges (Below 1000, 1000 to 100000, 100000 and above) with color palette

    Figure 247. Properties Panel - Example 1


  4. Click the field method in the Columns section and set these properties:

    • Formatting → Show as Go to events link: creates links to the Event List for each entry in method , to show the corresponding result (in the example, all results for query * | method=DELETE will be displayed).

    • Size → Fit to data

    • Cell colors → Static.

  5. Click the field status in the Columns section and set these properties:

    Cell colors → Condition → +Add condition → color red if the value in the field status contains 04

  6. Click the field _count in the Columns section and set these properties:

    Cell colors→ Thresholds→ choose a color palette → +Add threshold : different nuances in the palette (light green, dark green, etc.) will highlight the different thresholds (below 1,000, above 100,000, etc.).

For more information on the available properties that you can use to customize your widget, see Table Property Reference.