Application Management
Workaround to use "Split By" for fields with numerical data type value in Loggly Charts
This article provides steps as a workaround on how you can be able to use the Split by feature in creating charts for your fields that are of numerical data type.
First published date
7/28/2022 9:28 PM
Last published date
7/28/2022 9:28 PM
Overview
Split by feature in charts will only work if your field value is of a string data type. Fields with numerical values can't be selected, as this is a known limitation of Loggly.
Product section
Loggly
Resolution
You'll need to create a Derived Field rule via RegEx for your original field and convert the value of that derived field to a string, so you can be able to select it on the "Split by" category. Below are the detailed steps on how to do it:
1. Please create Derived Field; choose "RegEx."
2. From the "Event matches RegEx," place ^(.*)$
3. Choose your specific value from "Extract Field From."
4. Then click Test Rule
5. Click continue, and place a Rule name and Field name that you desire.
6. For the Field Value, choose "string."
1. Please create Derived Field; choose "RegEx."
2. From the "Event matches RegEx," place ^(.*)$
3. Choose your specific value from "Extract Field From."
4. Then click Test Rule
5. Click continue, and place a Rule name and Field name that you desire.
6. For the Field Value, choose "string."