Dashboard - aggregate a list into 1 row

Graylog Central (peer support)
1

hello, running GL 5.1.6 on a rocky 8 instance (via docker)

have question re creating custom dashboards, Im trying to create an audit table that shows all processes running on a host

Im ingesting auditbeat data and the process data is coming in as auditbeat_process_X fields
I cant figure out how to make my Data table show a List field as 1 single row, it breaks up each element in the list into a new row

is there a way to flatten a list into 1 row?

my dashboard:

thanks

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.