victorialogs.hits
Count logs over time using stepSec buckets and optionally group results by fields. Use it to identify activity spikes per group, with top groups plus an overflow group applied to a time window and filter.
Instructions
Count logs over time with stepSec buckets (default 60s), optionally grouped by fields. groupsLimit (default 20, max 100) returns top groups plus an overflow group. Maximum 10000 time buckets; default window last hour.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| end | No | ||
| query | No | * | |
| start | No | ||
| fields | No | ||
| filter | No | ||
| stepSec | No | ||
| rangeSec | No | ||
| groupsLimit | No |