Best Practice: Aggregations using field list shortcuts

You can perform simple aggregation functions quickly using the shortcut featured in the Fields List of the UI. The Fields List is located on the left side of the screen, featuring the first 200 fields seen by LogScale. To use the shortcut, select the ... next to a field in the Fields List.

If we wanted to see the top UserName values, we could use the following:

Example of accessing an aggregation shortcut

Any available aggregates and/or shortcuts can be used on the results. If you click an aggregation is auto-searches. However, you can hit SHIFT+click to append the aggregation to the bottom of any query you already have in the Query Editor.