Hello All.
I have a search: source="/var/log/squid/access.log" url NOT "esrs3-*" status = * | chart Count by status
This gives me a bar chart of the count of various http status codes, 200, 502, etc.
I want to divide the count by 100 if the count is greater than 300. and I would like to have a different color for each bar in the graph. there is only 1 field (count), is there a way I can get a different color for each status code which appears on the x-axis? I have seen the series.Color command, but not sure how to apply it.
Thanks
EWH
