Skip to content

Commit b6bed42

Browse files
authored
Multi group-by in Logs Analytics (DataDog#10504)
* Update _index.md * Update _index.md * Update _index.md * Update _index.md * Update _index.md
1 parent 529c465 commit b6bed42

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

content/en/logs/explorer/_index.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -57,15 +57,15 @@ Logs can be valuable as individual events, but sometimes valuable information li
5757

5858
### Fields
5959

60-
With the field aggregation, all logs matching the query filter are aggregated into groups based on the value of a log facet. On top of these aggregates, you can extract the following measures:
60+
With fields aggregation, all logs matching the query filter are aggregated into groups based on the value of one or multiple log facets. On top of these aggregates, you can extract the following measures:
6161

6262
- **count of logs** per group
6363
- **unique count** of coded values for a facet per group
6464
- **statistical operations** (`min`, `max`, `avg`, and `percentiles`) on numerical values of a facet per group
6565

6666
**Note**: Individual logs having multiple values for a single facet belong to that many aggregates. For instance, a log having the `team:sre` and the `team:marketplace` tags are counted once in the `team:sre` aggregate and once in the `team:marketplace` aggregate.
6767

68-
Groups support the [Timeseries](#timeseries), [Toplist](#toplist) and [Table](#table) visualizations.
68+
Fields aggregation supports one dimension for the [Table](#table) visualization, and up to three dimensions for the [Timeseries](#timeseries) and [Toplist](#toplist) visualizations. When there are multiple dimensions, the top values are determined according to the first dimension, then according to the second dimension within the top values of the first dimension, then according to the third dimension within the top values of the second dimension.
6969

7070
### Patterns
7171

@@ -159,7 +159,6 @@ For example, the following Toplist shows the **top 15 Customers** on a merchant
159159

160160
Visualize the top values from a [facet][2] according to a chosen [measure][2] (the first measure you choose in the list), and display the value of additional measures for elements appearing in this top. Update a search query or drill through logs corresponding to either dimension.
161161

162-
- When there are multiple dimensions, the top values are determined according to the first dimension, then according to the second dimension within the top values of the first dimension, then according to the third dimension within the top values of the second dimension.
163162
- When there are multiple measures, the top or bottom list is determined according to the first measure.
164163
- The subtotal may differ from the actual sum of values in a group, since only a subset (top or bottom) is displayed. Events with a null or empty value for this dimension are not displayed as a sub-group.
165164

0 commit comments

Comments
 (0)