The below query provide daily output with trend of weekly or time duration we select . how to use time wrap to check weekly only on Monday data for a month . I cannot use timechart with span of "1 m" , It Sums up entire month . Please assist ..
index=itsm sourcetype=****
| bin span=1d _time
| eval occ_PB=(logical_mb/1024/1024/1024)
| timechart span=1d eval(round(sum(occ_PB),2)) as occ_PB by host
