the first parameter is expectedBw and the other one is observedBw the expectedBw remains constant we have to show by line graph that how the expectedBw is being achieved with respect to observedBw. There need to be 2 lines one for expectedBw one for observedBw. the x axis should have time and y axis should have bandwidth means at different time how is the observedBw going forward or behind the expectedBw
Hi @palak-xperi,
if expectedBw is a fixed value, you could use a solution like this:
index=_internal
| timechart count AS observedBw
| eval expectedBw=3000
Ciao.
Giuseppe
but expectedBw also vary in different cases as the data is dynamic
Hi @palak-xperi,
Is there a rule for this variation?
you have to recreate this rule in your search.
Ciao.
Giuseppe