Let's break down the search piece by piece:
|
Search fragment |
Description |
| index=main sourcetype=access_combined |
You should now be familiar with this search from the earlier recipes. |
| | chart count by host,method |
The chart command is simply performing a count of events split by host and method. This produces the total count of each method for a given host. |
The Visualization tab simply takes the tabulated output of the stats command and overlays the given visualization. In this case, you overlaid a column chart visualization on the total count for each method split by host.
