Hello Everyone,
I’m one of the guys with 10+ years of experience in Logging & Monitoring (from the Splunk world), and starting out as a complete newbie here in the Grafana world, and it’s frankly quite a bit up hill to figure out how things are done here compare to Splunk.
I’m about to find my way, and have already seen a lot of great things, but what strikes me most is the amount of time it takes to find good solid descriptions (and videos) of how to do just simple things (very simple in the Splunk world at least
).
If I may be strictly honest, I think it’s way too difficult to find good and relevant documentation using just simple Google searching on Grafana (especially Loki, that currently spend time on).
Before writing these notes, I was looking for how (if possible) to automatically format number, dates and currency automatically according to the users locals (as seen by the browser).
Yes - I ran over “Unit” → “Local format”, but that certainly don’t look local to me, as I sit in Denmark and get my numbers formatted like: 75,366, whereas it ought to be: 75.366 (dot as thousand separator here).
Looking around I see and find quite a few subjects on this topics, but no solution so far.
And another (I’d consider very very basic and novice topic), which very clearly shows my (lack) of Grafana knowledge.
I have a lot of windows event logs coming in, and I just wanted to create a very simple table (take approx. 10 min to look nice in Splunk) to show in one row (for the given time span, say 3 hours):
- Total events
- x additional columns based on log level showing how many of the events were: Info, Warn, Error etc.
- Count of Unique hosts contributed
- Count of Unique customers (dedicated field for this)
After two days of searching and watching x number of YouTubes, today I finally figured out, that not only “sum by (level) bla. bla.” could do the job, but I also had to set the “Type” to “Instant”.
I’m not to the express too much of my personal feelings here, but I’d consider myself as “kind of” Splunk query nerd, and have made all kind of “interesting things” in Splunk, and is feels strange to spend 2 days to figure out how to just show log levels as a stats window on a dashboard - very strange!
PS. I still need to get the total number of events (and their size), number of unique hosts and customers into same stats window.
Said that, there is a LOT of great thing to find, and I have seen great YouTubes - thanks to a lot of you I suppose.
Whoever reads this, and have knowledge of how to show dashboards in the end-users locale settings, please let me know haw and where 
If you know of good training videos, on how to get started (as said I’ve already seen a lot), here I’m especially interested in getting stats out of my data, and turn these into KPI’s. Tips and tricks on transforms and manipulating logs to metrics etc., I’d be happy to know also 