# Group failed queries by failure type

Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fdataprime%2Fcookbook%2Ffailed_query_analysis.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fdataprime%2Fcookbook%2Ffailed_query_analysis.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

### TL;DR[​](#tldr "Direct link to TL;DR")

Use this query to group and count failed queries by `failureType` to quickly identify recurring failure patterns.

### Problem / Use case[​](#problem--use-case "Direct link to Problem / Use case")

You want to identify which types of query failures occur most frequently in your system. This helps pinpoint recurring issues such as timeouts, permission errors, or syntax problems.

### Query[​](#query "Direct link to Query")

```
source system/engine.queries

| filter queryInfo.queryOutcome.status == 'Failed'

| groupby queryInfo.queryOutcome.failureType

    aggregate count() as failures

| sortby failures desc
```

### Expected output[​](#expected-output "Direct link to Expected output")

A list of failure types sorted by frequency:

| failure\_type     | failures |
| ----------------- | -------- |
| "query failed"    | 160      |
| "bad request"     | 27       |
| "query timed out" | 10       |

### Variations[​](#variations "Direct link to Variations")

* **Filter by specific subsystem:** Focus only on failures from a given subsystem or service, e.g. `filter queryInfo.querySource == 'analytics-engine'`.

* **Calculate failure rate per type:** Combine success and failure counts per `failureType` to compute a percentage of failed queries.

* **Compare all statuses:**

  ```
  groupby queryInfo.queryOutcome.status aggregate count() as total
  ```