Skip to main content

​
Overview

The Analytics Dashboard shows how much telemetry your Sawmills collectors receive and how much they forward to each destination. Use it to measure reduction, spot high-volume sources, and validate whether filtering or aggregation changes are reducing downstream usage. You can switch between Logs and Metrics views. Both views are scoped to one pipeline, one destination, and the selected time range.

​
Requirements

The Analytics Dashboard requires Sawmills Collector version 1.577.0 or later. The Metrics view requires Sawmills Collector version 1.780.0 or later.
  • The selected pipeline must be deployed to collectors that are sending analytics data.
  • If a pipeline was never deployed, or its collectors are not reporting analytics data yet, the dashboard may be empty.
  • Vendor-specific usage details are shown only when a supported vendor integration is configured for the selected destination.

​
Open The Dashboard

Open Dashboard from the main Sawmills navigation. After the page loads, select:
  1. A time range
  2. A deployed pipeline
  3. A destination for that pipeline
  4. Either Logs or Metrics

​
Configuration Options

Use the selectors at the top of the page to refine the results:
  • Time Picker: Limits the analysis to the selected range, for example 1h or 24h.
  • Pipeline: Selects one deployed pipeline. A deployed pipeline is a pipeline whose current configuration was already deployed to collectors.
  • Destination: Selects one destination from the selected pipeline. Only destinations that support the current telemetry type are shown.
If the selected pipeline or destination does not support the current telemetry type, the view may be empty until you choose a different selection.

​
Logs View

Use the Logs view to understand log traffic and identify the biggest contributors to log volume.

​
Top-Level Metrics

In the Logs view, the summary cards always reflect the current pipeline, destination, time range, and Messages / Volume selection. The Messages / Volume toggle controls which unit is used across the summary cards and chart:
  • Messages: shows log record counts
  • Volume: shows log data size in bytes
For the selected mode, the dashboard calculates:
  1. Received The total number of log messages or total log volume received by Sawmills collectors during the selected time range.
  2. Sent The total number of log messages or total log volume forwarded to the selected destination during the selected time range.
  3. Data Reduction (%) The percentage reduction between Received and Sent for the selected log mode.
  4. Received vs Sent A time-series chart comparing received and sent values over time using the selected log mode.

​
Logs View Controls

  • Messages / Volume
    • Messages shows the count of log records seen during the selected time range.
    • Volume shows the total log data size in bytes during the selected time range.
  • Group By Breaks the results down by a selected log attribute, for example service.name. Use this to identify which services, environments, or other attributes contribute the most log traffic.

​
Logs View Output

The Logs view includes:
  • Summary cards for reduction, received volume, and sent volume
  • A Received vs Sent trend chart
  • A grouped breakdown table or chart based on the selected Group By field

​
Metrics View

Use the Metrics view to understand metric volume, time-series growth, and cardinality drivers.

​
Top-Level Metrics

In the Metrics view, the summary cards always reflect the current pipeline, destination, time range, and Time Series / Volume selection. The Time Series / Volume toggle controls which unit is used across the summary cards and chart:
  • Time Series: shows unique metric time-series count
  • Volume: shows metrics data size in bytes
For the selected mode, the dashboard calculates:
  1. Received The total metric cardinality or total metrics volume received by Sawmills collectors during the selected time range.
  2. Sent The total metric cardinality or total metrics volume forwarded to the selected destination during the selected time range.
  3. Data Reduction (%) The percentage reduction between Received and Sent for the selected metrics mode.
  4. Received vs Sent A time-series chart comparing received and sent values over time using the selected metrics mode.

​
Metrics View Controls

  • Time Series / Volume
    • Time Series shows how many unique metric time series were observed during the selected time range.
    • Volume shows the total metrics data size in bytes during the selected time range.
  • Metrics / Labels
    • Metrics groups the analysis by metric name.
    • Labels groups the analysis by label keys and values to help identify labels that drive cardinality or volume.

​
Metrics View Output

The Metrics view includes:
  • Summary cards for reduction, received volume, and sent volume
  • A Received vs Sent trend chart
  • A breakdown of metrics or labels, depending on the selected mode
  • A metric details drill-down for deeper inspection

​
Metric Details

Click a metric name to open Metric Details for the selected pipeline, destination, and time range. Metric Details can show:
  • Time-series count for that metric
  • Volume for that metric
  • Labels observed on that metric
  • Vendor usage details and references, when available

​
Vendor Usage And References

The References section in the Metrics view shows where a metric is used in the configured vendor platform, for example in dashboards, alerts, or queries.
Referenced By, Usage Status, Reduction Opportunity, and the References section in Metric Details are available only when a supported vendor integration is configured for the selected destination.
Use these fields as follows:
  • Referenced By: The number of vendor assets or queries that reference the metric.
  • Usage Status: Whether the metric appears to be actively used, unused, or has unknown usage based on vendor integration data.
  • Reduction Opportunity: A hint that the metric may be a candidate for reduction because it has low or no detected usage.
Vendor usage coverage depends on the selected integration and the metadata available from that vendor.

​
In-Context Actions

The dashboard includes shortcuts that open related workflows with the current context already selected.
  1. Live Tail From the Logs view, open a Live Tail session pre-filtered to a selected group-by value, for example a specific service name.
  2. Drop Metric Datapoints Processor From the Metrics view, open the processor creation flow with the selected metric pre-filled so you can stop forwarding that metric to the selected destination.
  3. Aggregate Metric Labels Processor From Metric Details, open the processor creation flow with the selected metric and selected labels pre-filled so you can reduce metric cardinality.
These actions open a pre-configured workflow. Review the generated processor before saving or deploying it.

​
Limits And Notes

  • Dashboard results reflect the currently selected time range, pipeline, destination, and telemetry type.
  • Metrics and logs use different units depending on the selected mode, so compare values only within the same view and mode.
  • Some labels cannot be aggregated. For example, labels that are not supported by the processor or labels that would change metric meaning may be excluded.
  • Vendor reference data may be unavailable, partial, or delayed if the vendor integration is not configured or does not expose enough metadata.