Summary Tables

Using a Summary Table, you can view statistical information about log records in a tabular format.

You can select which measures you want to see, as well as the fields on which to base those measures. Currently, the aggregate functions available in Summary Table are average, count, distinct count, sum, min, max, median, percentile, stddev, values, earliest, and latest. For timestats command, the aggregate functions like persecond, perminute, perhour, and perday are additionally available.

You can also group the results by any selected fields.

  1. Open the navigation menu and click Observability & Management. Under Logging Analytics, click Log Explorer.
  2. Search for logs for a set of entities. See Search Logs by Entities.
  3. From the Visualize panel, select Summary Table (open summary table).

    Visualization of summary table

    In the above example, the logs are filtered by log source.

  4. From the Fields section, drag and drop the required fields to the Value or Group By section.
  5. Click the down arrow to the right of the selected fields to select the function.

The summary table displays the required result.


Summary table with more fields added to the Value section

To drill-down to a specific value which is used in the group by part of your query, click on the value in the summary table.

Note

Apart from a Summary Table, all the graph and chart visualization options let you apply multiple statistical functions to your log records.