Dashboards & Visualizations

Unique result count timechart

New Member

I would like to display unique successful login users time chart report. my query is showing only today's results unique when I used '|dedup email' and wrong numbers showing for previous days.

index=myindex "result"=SUCCESS |timechart span=day count | convert timeformat="%m/%e"

Any thoughts?

Regards
Srini

Labels (1)
Tags (1)
0 Karma
1 Solution

Builder

If you're looking for the distinct count of logins per day:
| timechart span=1d dc(email) AS Email

View solution in original post

0 Karma

Builder

If you're looking for the distinct count of logins per day:
| timechart span=1d dc(email) AS Email

View solution in original post

0 Karma