Help with aggregation pie chart

Hi, all!

I want to create an aggregation pie chart with request/reply sizes of some URLs, from squid proxy logs. But I wish to group the URLs from the same domain in the visualization. See the image below:

Look at all these “instagram” domain URLs. Is there a way to group all these URLs from Instagram in just one?

I think you would have to do the heavy lifting in a pipeline rule ahead of time, use regex or something and then write that to a new field and then group by that.

Yeah, I thought so. Just wanted to make sure that there wasn’t some feature that I don’t know about that would allow this grouping without the need for treatment in a pipeline.

Thanks anyway!

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.