More than one source in a graph possible?

Graylog Central (peer support)
1

Hello. We want to have the login count for two (or more) sources in the same line graph on the Dashboard. Is that even possible? They should be separated in the graph so one line for each source. The query is “(source example1 example 2) AND level:5 AND source_method:login”.

The aggregate configuration looks like attached image but right now we only see a combined line for both the sources in the query. Our Graylog version is 3.2.4.

Skärmavbild 2020-04-24 kl. 08.27.37
Skärmavbild 2020-04-24 kl. 08.27.372266×944 212 KB

Thank you

2

No replies to this… Does that mean that it isn’t possible to do?

3

I found out myself how to do it. Case closed.

4

Afternoon Clas! I’m looking to do something similar. Can you share your solution?

5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.