I am pretty new to loki but familiar with grafana in combination with influxdb. With influxdb an aggregation is always done over all tags combined. If I want to do split it by tag I have to group by the tag.
With Loki it seems to be the opposite. An aggregation is done separately for each stream. But I didn’t find a way to do it for all combined.
I have a log from an application (frigate) where I extract some labels (compose_project, compose_service, container_name, level, module).
I want a graph that shows me the total number of log messages for that application. So I set the label filter to compose_project=“frigate” and use the count_over_time aggregation.
The raw query is:
This gives me a result for every stream. How do I combine them into one value?
This seems like such a basic thing to do, but I couldn’t figure it out =(