Graylog 3.2 - Adding rows to an aggregation Windows

Graylog Central (peer support)
1

Is it possible for me to add rows to an aggregation windows? In other words, I would like to get all the values in a field over a period of time but it is being cut off.

2

Hey Tim,

could you provide a screenshot to get visually a better understanding of your problem?

Greetings,
Konrad

3

Konrad,

Thank you for responding. Here I have 15 rows. In 3.1 when I did a “Quick Values” I could go to Configure - Add rows (I think that’s what it was called) and make it more if I wanted to see all the values. Can I do anything like that here.

2020-02-03 07_28_43-Window
2020-02-03 07_28_43-Window1154Ă—766 30.9 KB

4

Hi Tim,

a now I see the problem. So this can be a really expensive request if we would allow to ask for all rows. But you can set the amount of rows to be requested:

more-rows
more-rows1190Ă—819 207 KB

I hope I could help.

Best regards,
Konrad

5

Thanks a million. That’s exactly what I was looking for.

And FTR, I only use it for SOME things. :slight_smile: