1.) Use label_replace to rename label severity to level:
2.) Use lower to “normalize” value:
This is just advice, not a copy&paste solution. Make a few tries until you reach desired result on the LogQL level.
1.) Use label_replace to rename label severity to level:
2.) Use lower to “normalize” value:
This is just advice, not a copy&paste solution. Make a few tries until you reach desired result on the LogQL level.