help on timechart

[jip31]

hello

I need to do a timechart from a stats count 

this stats count is used to pre filter events (sante=OK)

index=toto sourcetype=tutu 
| stats count(hang) as hang, count(crash) as crash, count(web) as web by site 
| eval sante=if((hang>5) AND (crash>2) AND (webduration>=1), "OK","KO")   
| search sante=OK

 Now I wonder how to do to timechart these events?

Thanks

[ITWhisperer · Accepted solution]

Your stats command needs to include some sort of time element

index=toto sourcetype=tutu 
| bin _time span=1h
| stats count(hang) as hang, count(crash) as crash, count(web) as web by _time site 
| eval sante=if((hang>5) AND (crash>2) AND (webduration>=1), "OK","KO")   
| search sante=OK