We need to chart Successful vs Failed requests per brand from application logs. The brands are logged in the message body (JSON fragments like "brand":"Bradford"), and success is indicated by "offerAccepted":"Y". This is the example output below — it should look like this:
In Grail/DQL, we can parse and aggregate in a single query. In Logs & Events Classic, we understand aggregation requires Log Processing + Log Metrics rather than inline summarize. I’d like to confirm the best practice for both, and validate the parse/aggregation approach. (Docs I’ve consulted: DQL matcher & parsing, aggregation commands, and Classic Log Monitoring guidance.)
In Grail/DQL, we can parse and aggregate in a single query. In Logs & Events Classic, we understand aggregation requires Log Processing + Log Metrics rather than inline summarize. I’d like to confirm the best practice for both, and validate the parse/aggregation approach. (Docs I’ve consulted: DQL matcher & parsing, aggregation commands, and Classic Log Monitoring guidance.)
Featured Posts
