Hi folks,
We are currently trialing a new (open source/free/community edition) Graylog instance with version 3.3.2, currently running 2.1.1. In the older version there is a way to make a count of the unique values of a field. This value can be retrieved by e.g. accessing the ‘Statistics’ part, and looking at the ‘Cardinality’ value. Similarly this can be achieved through creating your own widget.
I am however unable to locate any of this functionality in the new version we are running (3.3.2). I looked into using count(field), sum(field) and some other values, but there isn’t any function e.g. distinct() or unique() that allows me to get a count of the amount of unique values in a field.
Is there any way to retrieve the unique count of the values of any field?
For reference, example output I am looking for:
List of logs:
name: a,
name: b,
name: c,
name: a,
name: a,
name: b,
name: d
Unique count: 4 <-- this is the value I am looking for
Count: 7
Thank you in advance for the help!
Best regards,
Matthijs.
