otel-log-stats

Single-pass OTEL log exploration: discovers attributes and computes top values with severity breakdown (error/warn/info/debug counts). Skips rows without a body column.

Recommended columns for OTel logs: attributes, resource.attributes (the default attribute locations in the Berserk OTel log mapping).

The severity parameter defaults to severity_number if not specified.

Output: Two tables. Table 1 (Attributes): AttributePath, Type, Cardinality, Frequency Table 2 (Values): AttributePath, Value, Total, ErrorCount, WarnCount, InfoCount, DebugCount, HasMore

Syntax

otel-log-stats attributes, resource.attributes

Analyze OTel log attributes (severity defaults to severity_number)

Syntax

otel-log-stats col1, col2 severity=sev_col

Analyze log attributes with explicit severity column

Syntax

otel-log-stats col severity=sev_col top_attrs=20 top_values=15

Analyze with custom limits

Examples

Example 1 — Analyze OTel log attributes and resource attributes

Logs
| otel-log-stats attributes, resource.attributes

Result table 1:

Result table 2:

Example 2 — Analyze with custom limits

Logs
| otel-log-stats attributes, resource.attributes top_attrs = 10 top_values = 5

Result table 1:

Result table 2:

Example 3 — Analyze with explicit severity column

Logs
| otel-log-stats attributes severity = my_severity_col

Result table 1:

Result table 2:

Related

• fieldstats
• summarize