Skip to main content
Solved

Dashboard based on webhook ( feeds)

  • June 2, 2025
  • 1 reply
  • 21 views

Forum|alt.badge.img+8

Hello, I'm actually developing a dashboard for monitoring feeds ingestion metrics  (ingested through webhook) , but i'm not getting any results ( this problem is for all webhook feeds ) 
What is the best solution please ? or this is not handled by Google right now ) 
The Query used : 

ingestion.component = "Out-of-band processor"
ingestion.log_type = "ZSCALER_xxx"

$date = timestamp.get_date(ingestion.end_time)
$logtype = ingestion.log_type

match:
$date, $logtype

outcome:
$log_count_sum = sum(ingestion.log_count)

order:
$date desc

 

Best answer by JeremyLand

The webhook logs don't flow through the OOB processor so you'll want to query a different ingestion component to see associated metrics.

You should see them with ingestion.component = "Ingestion API" or ingestion.component "Normalizer"

1 reply

JeremyLand
Staff
Forum|alt.badge.img+7
  • Staff
  • Answer
  • June 2, 2025

The webhook logs don't flow through the OOB processor so you'll want to query a different ingestion component to see associated metrics.

You should see them with ingestion.component = "Ingestion API" or ingestion.component "Normalizer"