I need to query and count the failure logs of my app from different locations to test the performance of the APIs.
fields @message | filter (@message like /Failure/ and @message like /AWE/)
| stats count()as failure by bin(1d) as AWE
Right now I filtered the logs with the expressions of 'Failure' and 'AWE'(one of the location) and got the below results.
# AWE failure
1 2020-12-30T08:00:00.000+08:00 6
I want to continue to filter failure logs with other locations on the same widget but I can't. So I want to know if I am missing something or it is just not possible to do the thing I want to do.