I have a search query as
sourcetype="file.csv"|eval Created_Date = mvindex(split(Created," "),0)| stats count as Issues_created by Created_Date
which gives me output as
Similarly another search query as
sourcetype="file.csv" Resolved|eval Created_Date = mvindex(split(Created," "),0)|stats count as Issues_Resolved by Created_Date
basically i am filtering out events which have status as Resolved and creating events
which gives me output as
I want to combine these two queris to give me bar chart which will display the statistics as
Created_Date ---- Issues_created ---- Issues_Resolved
01-01-2020 | 8 | 8 |
01-02-2020 | 9 | 0 |
01-03-2020 | 6 | 1 |
Kindly help me with this..