Archive

Single graph from Multi search index

New Member

Hi, I need a chart from multiple source and multiple search terms.

search 1: index="SessionController" host = "abc01" | stats distinctcount(session) by datehour
search 2: index="CompleteSale" host = "xyz
" | stats distinctcount(order) by datehour

I want a line graph that will show number of requests (i.e. count of Session's) and the orders per hour.

Thanks in advance.

0 Karma

Contributor

If the session and order fields are exclusively used on the source where you want to count them, you can simply combine your searches:

(index="SessionController" host = "abc01*") OR (index="CompleteSale" host = "xyz*") | stats distinct_count(session) distinct_count(order) by date_hour
0 Karma