Table of Contents


chart command creates columnar data ready for a graph display, based on the incoming data.


You can use chart with aggregation functions.

index=example | chart count(_raw)
an example of count() with chart

chart shows only one table column by default. Group your results with by to have more table columns visible at the same time.

index=example | chart sum(_raw) by _time
example of grouped data with chart

Switching between the graph options you can convert the table data into a bar, pie, area, line or scatter chart.

graph options