日志洞察查询中的多个统计命令

Question

fields @timestamp, @message, @paths
| filter @logStream = "collection-wallet-gateway" and @message like /Log Response/
| parse "path=http://wallets.simpaisa.com/v2/wallets/transaction/*," as @path
| sort @timestamp desc
| stats count(*) as @total by @path
| stats sum(@total) as @totaltransactions by @path
| display @message, @path, @total, @totaltransactions

抛出错误：

Compile Error - Unknown symbols found in or after stats: @message

过滤所有包含“path=”的@message，并解析“path=”以列出所有url，并统计启动、验证、最终确定。然后找到所有内容的总和并将所有内容放入一个表中

Answer 1

从显示中删除“@message”解决了错误消息。这是因为我按“@path”对数据进行分组，这使得“@message”很难分组。