I would like to know a little more about the “count() function” in logpoint and it’s meaning. In fact as you can see in screen shot I received a log at 10:42:53 and count() is equal to 53 and theye are normaly 53 logs. But when I clic on this line (log) all of these 53 logs are exactly the same ! what is meaning ? How can I interpret ? Is it just one log (one action realised) ? or theye are really 53 logs (53 actions realised)
Thank you in advance for your help.
It depends on what the actual query is, but a count() by is just that - it counts how often there is a message for this field. So if you click on the magnifying glass and get 53 messages, then things work as intended from a Logpoint perspective, and the same log message was generated 53 times in the same second at the source.
Obviously there could be minute differences between them, or the aggregation is on a field where it doesn’t make much sense.
Yhank you very much for your explanations. Now, it's more clear for me.