How to display the sum of a field?


I implemented Graylog server, I can normally receive logs from my servers …

I would like a dashboard that shows the number of impressions per user and printer on my print server.

In fact, it is showing the sum of the winlogbeat_user_data_Param8 field.

how can I do this?

Is it possible through the graylog interface to execute sql queries?


without knowing how you data is structured and normalized nobody would be able to help you writing a query to get the information you like to.

I use winlogbeat … I get the windows logs normally, however, event 307, the number of prints, I need to add the amount of these impressions that is the field winlogbeat_user_data_Param8 … how can I do this and show that counter on the dashboard?

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.