Hello,
I am trying to build a chart based on 3 fields: 2 calculated fields and a simple one:
| query="select OPEN_FY, OPEN_QUARTER, CLOSURE_FY, VULNERABILITY_LIFECYCLE, SOURCE, LAYER
from table
| [evaluate] DETECTION_TIME=if((OPEN_FY="21/22" AND OPEN_QUARTER ="Q2"),"new" , "old")
| [evaluate] SOURCE=if((SOURCE!="QUALYS-P"), "Confirmed", "Potential")
| chart count(DETECTION_TIME) by SOURCE over(LAYER)
the last line won't work. I would need to see the total number of vulnerabilities by source by detection time and by layer.
Is that possible?
Thanks
Thank you, once again 😄
@DanielaEstera Please mark the solution so that this question can be marked as solved and others can directly look over it, thanks.
Thank you so much @ashvinpandey That worked like a charm!
@DanielaEstera Try using below command:
| chart count(DETECTION_TIME) as DETECTION_TIME over LAYER by SOURCE
@DanielaEstera Also, If this solution helps you, an upvote would be appreciated.