I am looking for a way to create a stacked graph with two metrics, a count of ‘A’ and a count ‘B’, similar to a histogram but with two values (one from each search).
I can see from the docs that I can create field graphs from a numerical value and combine two field graphs to make a stack graph (this works fine for numerical values).
What I would like is to create the same but from two searches, I don’t think this is currently possible.
Right now I am looking to workaround this through rsyslog/logstash (which I use to feed graylog) so that logs containing ‘A’ or ‘B’ in the messages get an additional numerical field ‘contains_A’ -> 1 ‘contains_B’ -> 1, which I can then use in graylog dashboards to create my two field graphs and combine them into a stacked graph.
Is this the only way for now, or is there some other way I am missing out?