Hi,
I have a query such as below.
index = abc* host=efg*
|stats latest(_time) as latest by host
| eval Status = case (latest <= relative_time(now(),"-15m") AND latest > relative_time(now(),"-30m")," smiley1 ", latest <= relative_time(now(),"-30m"),"smilye2 ",true(),"smiley3" ) |eval Last_Updated_Time = strftime(latest,"%c")
I now wanted to view the output in either single value chart or in trellis mode with the host name,smiley and the Last_Updated_Time below the icon.
I do not have access to use to css or js script.
Suggestions pls
Thanks in advance.
↧