On the Explore Logs page, you can select different chart types to change the way the search result is displayed for a query.
You can fetch your query search results as described in Search for and Filter Log Events. After fetching the results, you can select the chart type in the drop-down menu in the upper-right corner of the chart.
Different chart types require different numerical functions, use of time series, and group by fields:
Chart Type | Numerical unction | Time Series Requirement | Group-by Requirement | Additional Tasks |
---|---|---|---|---|
Area Use this chart to display the changes in log trend over a period of time. |
Any | Time series | Optional |
|
Column Use this chart to display changes in log trend over a period of time by displaying the comparisons based on your selection of the Group by field(s). |
Any | Any | Optional |
|
Line Use this chart to display changes in log trend over time using lines. |
Any | Time series | Optional |
|
Pie Use this chart to display the log trend as a percentage in a circular graph based on your selection of the Group by field(s). |
Count or Unique Count | Non-time series | At least one field |
|
Bubble Use this chart to to display the relationship between two or more Group By fields. |
Any | Non-time series | Two fields |
|
Guage Use this chart to display the overall value of the selected numerical function as a single quantitative value. |
Any | Non-time series | None | Enter the minimum and maximum values for each type of severity such as Ok, Caution, and Alarm. |
Scalar Use this chart to display the overall value of the selected numerical function as a single value of data. |
Any | Non-time series | None | None |
Table Use the table view to display query results as rows and columns. |
Any | Any | Optional | None |
Examples
An area chart displaying the log trend based on size.
A column chart displaying the count of logs sent to VMware Aria Operations for Logs (SaaS) by each hostname over a five minute interval.
A line chart displaying the count of logs sent to VMware Aria Operations for Logs (SaaS) by each source over a five minute interval.
A pie chart displaying the percentage of error logs sent to VMware Aria Operations for Logs (SaaS) by each application over a 30 minute interval.
A bubble chart displaying a combination event types and hostnames generating maximum error logs.
A guage chart displaying the current status of log ingestion and how far it is from reaching the maximum log ingestion limit for the day.
A scalar chart displaying the unique count of hostnames in the last six hours.
A table displaying the unique count of hostnames at five minute intervals in the last six hours.