While searching for log events, you can group log events by multiple fields and see a time-series or non time-series visualization.

Procedure

  1. In the Explore Logs page, fetch your query search results for log events. For more information, see Search for and Filter Logs.
  2. In the chart under the query, click Over Time and select Time series or Non-time series. You can also do a group-by for the results as time series or non-time series data:
    Option Description
    Time series The results from the search time-frame are split into multiple subresults and for each subresult, a group-by is performed.
    Non-time series A group-by is performed for all the results across the search time-frame.
    Tip: You can view the result count alone by selecting Non-time series without a group-by option.
  3. Click the Search button.