Using this query to get monthly data for 12 months gives these results -(Please see attached image) only the first and last rows of column "VolumeB" data are generated. Can anyone please help on what needs to be done to get data in all rows of column VolumeB".
Thanks in advance
index=_internal source=license_usage.log type="RolloverSummary" | bin _time span=12mon | timechart span=1mon sum(b) AS volumeB | join type=outer _time [search index=_internal source=license_usage.log type="RolloverSummary"] | foreach * [eval <>=round('<>'/1024/1024/1024, 3)]
