Event List Widget
Event List widget is the main way of
exploring events in Humio, as it displays events as they are ingested
into Humio, and is the default visualization on the
Search UI page for events.
Think of an event as a line from a log file: you can select a portion of lines from a given search interval to be viewed in the widget, as shown in Figure 121, “Event List”.
Figure 121. Event List
Find in table below the main columns that are typically displayed in Event List.
@timestamp and @rawstring columns are displayed by default in a given format. For example, @rawstring is displayed as Log line format. However, the formatting for fields in the Event List can be changed, see Fields Data Types for more information.
|@id||string||Meta field automatically generated by Humio for all events.|
|@timestamp||datetime||The timestamp of the events is used to order events in the list.|
|@rawstring||string||The content of the line. Usually this value is automatically assigned during parsing.|
Event List will list as many results as returned by the Humio server,
which defaults to the
200 most recent events of the
search interval. You can increase this by using the
tail() function, for example
tail(1000), but this can cause performance issues
in the UI if too many elements have to be rendered.
Use the widget'spanel to configure the following properties.
The title of the widget as displayed in the dashboard. As in the example Figure 121, “Event List”, it could be Errors Over Time.
The description of the chart. This is free form text supporting markdown syntax.
This same description appears in the dashboard as a tooltip when hovering over the question mark on top of the widget.
Show in context...
You can perform a context based search, that is, see the context surrounding a specific event of your widget, by clicking the
+sign next to each event, and then selecting the desired fields: the event will be shown back in the main Search UI page.