Hello experts,
I am a novice and would need some help with my below requirement. My search return some thing like below. Now, I need to plot a graph where I can show the difference value in a line chart for every 4 hours.
Max MIn Difference
1000 700 300
Kindly assist
Thanks,
Naomi
Sounds like a simple timechart to me. So something like:
index=prod_app source="/app/sample.txt" | timechart span=4h eval(max(Records)-min(Records)) as dailydiff
Hth,
Kai.
Sounds like a simple timechart to me. So something like:
index=prod_app source="/app/sample.txt" | timechart span=4h eval(max(Records)-min(Records)) as dailydiff
Hth,
Kai.
Thanks for the message
My query is like this
index=prod_app source="/app/sample.txt" | bucket Time span=1h | stats max(Records) as dailymax, min(Records) as dailymin | eval dailydiff = dailymax - dailymin