Stacking Fields - Graylog 2.4 New Feature


(Ayoola Ayooluwa) #1

Hi guys, I created a dashboard for top source IP Addresses and i want to apply the new feature “Stacked fields” but its not bringing any fields. Please how do i go about it?

Thanks


(Matt) #2

Hey Ayoola,

This is a really neat new faeture, to use it create the histogram for top ip address buy selecting ‘Quick Values’ for the IP Address field. Then on the new bart that appears choose ‘Customize’ and then at the bottom is the entry point for your stacked fields.

So for instance you could add user for the IP address and it would show the IP address and then a hyphen and the entry for user.

Very cool!


(Ayoola Ayooluwa) #3

Thanks @mattmatics, i tried it now and it worked perfectly


(system) #4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.