Unique result count timechart

[sriniavula66]

I would like to display unique successful login users time chart report. my query is showing only today's results unique when I used '|dedup email' and wrong numbers showing for previous days.

index=myindex "result"=SUCCESS |timechart span=day count | convert timeformat="%m/%e"

Any thoughts?

Regards
Srini

[jpolvino · Accepted solution]

If you're looking for the distinct count of logins per day:
| timechart span=1d dc(email) AS Email