Lets assume you have a field called time_taken
, this should work
.... | timechart span=1h avg(time_taken) as average max(time_taken) as max
Lets assume you have a field called time_taken
, this should work
.... | timechart span=1h avg(time_taken) as average max(time_taken) as max