Dashboard based on webhook ( feeds)

Hello, I'm actually developing a dashboard for monitoring feeds ingestion metrics  (ingested through webhook) , but i'm not getting any results ( this problem is for all webhook feeds ) 
What is the best solution please ? or this is not handled by Google right now ) 
The Query used : 

ingestion.component = "Out-of-band processor"
ingestion.log_type = "ZSCALER_xxx"

$date = timestamp.get_date(ingestion.end_time)
$logtype = ingestion.log_type

match:
$date, $logtype

outcome:
$log_count_sum = sum(ingestion.log_count)

order:
$date desc

 

Solved Solved
0 1 86
1 ACCEPTED SOLUTION

The webhook logs don't flow through the OOB processor so you'll want to query a different ingestion component to see associated metrics.

You should see them with ingestion.component = "Ingestion API" or ingestion.component "Normalizer"

View solution in original post

1 REPLY 1

The webhook logs don't flow through the OOB processor so you'll want to query a different ingestion component to see associated metrics.

You should see them with ingestion.component = "Ingestion API" or ingestion.component "Normalizer"