I have this query that ends like this:
| convert timeformat="%Y-%m-%d" ctime(_time) AS date
| stats count by loggingObject.methodName, loggingObject.httpReturnCode, date
I then click on "Visualization". How do I get the x-axis to be dates instead of the method name?
x-axis will be the first column / field in the results, so put date as the first field after the by
| stats count by date, loggingObject.methodName, loggingObject.httpReturnCode