regex - In kibana 4 i want to visualise a part of URL field to count -
i had field meta.uri. want visualize uri. want count of support
, basic
not full uri. has
/support/user/index?user=some /support/mine/ /basic/index/ /basic/home?page=1
i want starting part, like:
support basic
in kibana4, can setup filter sub aggregation , define each filter.
in "buckets" section, select "split lines", "filters" aggregation type, define filter (e.g. myfield:myvalue).
if have logstash, suggest making new field value events processed.
Comments
Post a Comment