Chart count by 3 fields

[DanielaEstera]

Hello,

I am trying to build a chart based on 3 fields: 2 calculated fields and a simple one:

|  query="select OPEN_FY, OPEN_QUARTER, CLOSURE_FY, VULNERABILITY_LIFECYCLE, SOURCE, LAYER
from table
| [evaluate] DETECTION_TIME=if((OPEN_FY="21/22" AND OPEN_QUARTER ="Q2"),"new" , "old")
| [evaluate]  SOURCE=if((SOURCE!="QUALYS-P"), "Confirmed", "Potential")
| chart count(DETECTION_TIME) by SOURCE over(LAYER)

the last line won't work. I would need to see the total number of vulnerabilities by source by  detection time and by layer.

Is that possible?

Thanks

[DanielaEstera]

Thank you, once again 😄

[ashvinpandey]

@DanielaEstera Please mark the solution so that this question can be marked as solved and others can directly look over it, thanks.

[DanielaEstera]

Thank you so much @ashvinpandey  That worked like a charm! 

[ashvinpandey]

@DanielaEstera Try using below command:
| chart count(DETECTION_TIME) as DETECTION_TIME over LAYER by SOURCE

[ashvinpandey]

@DanielaEstera Also, If this solution helps you, an upvote would be appreciated.