Hi, the query below would give you a table of
operations that have exceeded 2000 (ms?) more than 9 times for the time period searched. I'm not exactly sure that that's what you're asking for, but I think so.
index=xxx_logs service_name=cix* operation=GetTypeFrom* Transaction_Time > 2000 |stats c by operation | where c>9
If you want to make a chart of that, you could replace the
stats with a
Hope this helps,