Hi,
How can we Ignore timechart column if all rows having 0 values.
basically I am using trellis to display and want to ignore charts which doen't have any data.
Try this
your current search before the timechart command
| where Issues_Count>=0
| timechart span=1h cont=false values(Issues_Count) as Issues_Count by Alert_Description limit=20
Try this
your current search before the timechart command
| where Issues_Count>=0
| timechart span=1h cont=false values(Issues_Count) as Issues_Count by Alert_Description limit=20
thank you 🙂 some times simple answer won't click in mind and keep looking for complex solution.
try this :
| bucket span=1h _time
| chart values(Issues_Count) as Issues_Count by _time Alert_Description limit=20
also, try :
| timechart span=1h cont=false values(Issues_Count) as Issues_Count by Alert_Description limit=20
@mayurr98 : thanks for response. but not working 😞