Create a terms with field "message" in a dashboard

[xdatanet]

I receive an Event Log from Windows with a HostName in message field like "NBADM01" or "NBUSR02".

I'm trying to create a row with a "terms" table in order to count the total of HostName and fill in a bar-like graph.

If I put "message" in field I can view a bar with the right number but all in one bar named "missing field".

It seems I cannot filter the message field. I can filter all other fields.

Why???

Thank you in advance.
Graziano.

[HowardJackson]

Ensure that the message field is being correctly extracted and parsed. Sometimes, if the field is not properly extracted, it might appear as missing field.

[jmichaelson]

THe key here is definitely going to be to ensure that the message field is parsed correctly. In a table you can click on a log entry and it will bring up all the fields that Nagios Log Server has parsed so you can verify it.