You can perform numerical functions on your log results to view the count of events, unique count of field names, and so on.

Procedure

  1. In the Explore Logs page, fetch your query search results for log events. For more information, see Search for and Filter Logs.
  2. In the chart under the query, click Count of Events and select one of the following options:
    Option Description
    Count of events This is the default option, which shows the total count of log events.
    Unique count of [field name] This option shows the number of unique instances for the selected field name.
    Numerical function for [field name] This is applicable only for numerical fields. You can select multiple numerical options such as Average, Maximum, and so on. For example, if you select the field process in the drop-down menu with the Average and Maximum options, the results display the average and maximum counts for the field process.
    Tip: You can group the results of the numerical functions and see a time series or non-time series visualization as explained in Group Logs During Search.
  3. Click the Search button.