View the Field Summary

When using any variation of the Histogram visualization, Oracle Log Analytics provides a high-level summary of the key fields of the log entries that are returned as search results. The field summary, which is represented in the form of horizontal bar charts, presents a quicker way to analyze your search results, by grouping the entries based on the display fields that you’ve selected.

For example, in your search query, you’ve selected Oracle WebLogic Server as the entity type, FMW WLS Server logs as the log source, and bea-090898, bea-001110, and bea-090152 as error IDs. You’ve also selected Entity Type, Log Source, and Error ID as display fields. Then, the field summary displays a snapshot of the search results grouped by the display fields. If you hover your cursor over a particular error ID in the Field Summary section, then Oracle Log Analytics highlights the error ID and also highlights the relevant portions of the horizontal bar charts of all the associated entity types and log sources that are displayed in the summary. In addition, the relevant portion in the Histogram visualization is also highlighted, depicting the number of records that are associated with the selected error ID.
If you click the selected error ID, then the field summary, histogram, and the table of records change to return only those entity types, log sources, and records that contain the selected error ID. You can add as many fields as you want in the summary by dragging and dropping attributes from the Fields panel.
To view the field summary:
  1. In Oracle Log Analytics, from the Visualize panel, select Records with Histogram (open records with histogram).
  2. From the Pinned section of the Fields panel, click Entity Type. In the Entity Type dialog box, select the required Entity types, such as Oracle WebLogic Server, Oracle HTTP Server, and Database Instance, and click Apply.
  3. From the Pinned section of the Fields panel, click Log Source. In the Log Source dialog box, select the required log sources, such as all FMW WLS Server logs, and click Apply.
  4. From the Other section of the Fields panel, click Error ID. In the Error ID dialog box, select the required error IDs, such as bea-090898, bea-001110, and bea-090152, and click Apply.
  5. From the Pinned section of the Fields panel, drag and drop Entity Type, Log Source, and Error ID to the Display Fields section of the Visualize panel.
  6. In the Field Summary section, click the Show Facet Summary (show facet summary) icon.
    The Field Summary section displays a summary of the search results grouped by Entity Type, Log Source, and Error ID.

In the prior example, if you hover your cursor over an error ID, such as bea-090898, then Log Analytics highlights the error ID in the Error ID field of the Field Summary section. It also highlights the relevant portions of the horizontal bar charts of all the entity types and log sources associated with bea-090898, which are displayed in the summary. In addition, the relevant portion in the Histogram visualization is also highlighted, depicting the number of records that are associated with bea-090898.

If you click bea-090898 in the Error ID field of the summary results in the field summary, histogram and the table of records change to return only those entity types, log sources, and records that contain bea-090898.



Configure the Display of the Field Summary

You can show or hide fields in the Field Summary section. You can also sort the entries of a field. In addition, you can add more fields in the summary.

  1. Click the Hide Graph (hide graph) icon on the field that you want to hide from the summary.
    The field is no longer displayed in the summary.

    To display the hidden field, click the Hidden Fields link, and then click the Show Graph (show graph) icon on the field that you want to display.

  2. Click the Sort (sort graph) icon on the field whose entries you want to sort in the ascending or descending order.
  3. From the Pinned section of the Fields panel, drag and drop the Severity field to the Display Fields section of the Visualize panel to add the Severity field in the summary.