- Go to Graylog UI page
- Make a search for the field and value that you want to represent as a chart
- Around the bottom left corner of search page, click all fields
- Find timestamp field and generate chart from it
- Around top right of the chart, Customize > Value > Total
That's it for a single value chart. But if you want a chart to contain multiple values, keeps going
- Redo 2-5 again for different fields
- Click and hold on hamburger menu button at the top right of each, drag to merge them
That's neat right?