You can do something like this:
some search | timechart avg(some_value) as avg | eval green = case(avg < 50, avg) | eval yellow = case(avg < 80, avg) | eval red = case(avg >= 80, avg) | fields - avg
Display the resulting chart as a stacked column chart, and set the colors to green, yellow and red.
You can do something like this:
some search | timechart avg(some_value) as avg | eval green = case(avg < 50, avg) | eval yellow = case(avg < 80, avg) | eval red = case(avg >= 80, avg) | fields - avg
Display the resulting chart as a stacked column chart, and set the colors to green, yellow and red.