Currently response code is a field https://github.com/influxdata/telegraf/blob/5f0a63f554861e1ea8f39a6293f09d63b1da85d8/plugins/inputs/logparser/grok/influx_patterns.go#L69
I think response code would be used pretty frequently for WHERE and GROUP BY and seems like it should be a tag as it also wouldn't increase series cardinality too much. -- Remember to include the InfluxDB version number with all issue reports --- You received this message because you are subscribed to the Google Groups "InfluxDB" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/influxdb. To view this discussion on the web visit https://groups.google.com/d/msgid/influxdb/fa0b47f0-9d19-447c-a3de-5ec5d721b364%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
