I'm writing values to cloudwatch logs in this fashion:
processname=* ingestiondt=* batchcount=*
I want a line graph of batchcount for each processname for all dates in ingestiondt. How do I do this? I've gone through AWS documentation on this and it seems like you can only do visualizations on aggregate functions like max() or count() with the stats keyword. What if I want to use values that are directly in the logstream.
I've written queries like this but they only result in a pie chart or a bar graph which is really not suitable for this situation
fields @message
| parse @message "processname=* ingestiondt=* batchcount=*" as processname, ingestiondt, batchcount
| stats latest(batchcount) by processname