Versions Compared

Old Version 15

changes.mady.by.user Borja Moro Moreno

Saved on

compared with

New Version 16

changes.mady.by.user Borja Moro Moreno

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleExample 1

Use the following query in a table widget to create a dynamic table that allows you to specify the source data table, the grouping period, and the grouping key.

Code Block
query(
 from $*Select0.value
 group every $*Select1.value 
 by $*Select2.value select count() as count)

The table is linked to three different Select-type inputs populated with the values shown below.

Select0

Select1

Select2

["siem.logtrust.web.activity", "siem.logtrust.web.navigation"]

[“1m”, “2m”, “5m”, “10m”]

[“type”, “city”]

The following capture shows the table after selecting siem.logtrust.web.activity as source table, 5m as grouping time and type as key column for the grouping.

Image RemovedImage Added
Expand
titleExample 2

Use the following query to feed a column widget to display the count of methods with response times greater than a specified value and grouped by a period selected from a list of values.

Code Block
query(from siem.logtrust.web.activity
where responseTime > $*Input0.value
group every $*Select0.value by method
select count() as count)

The inputs are populated with the values shown below.

Select0

Input0

["5m", "10m", "15m"]

500

The following capture shows the column widget after selecting 15m in the select input as grouping period and entering 500 in the free-text input as filtering value, so that only methods with response times greater than 500 are shown in each five-minute. You must select the count field as the y-axis value and add the method field as a series in the Visual settings of the column widget.

Image RemovedImage Added

Related articles:

...