I just got a question I couldn’t answer: If I do a search on something that’s is a indicator, and then also something that is a real issue, example:
message: “indicator” OR message: “problem”
I get a nice histogram as usual, but the user wants to highlight the different search criteria in different colours in the histogram, to see if the indicator overlaps with the problem over time.
Is that possible in Graylog?
The standard search histogram seems to be mono-colour (but I wouldn’t know for sure)