Combine timechart in one chart by fields.

[juanvarelagloba]

I have this query:

index=betas host="*433*" level=ERROR 
(source="*RequestUpg*" class="*RequestUpgEndPoint*") OR 
(source="*DisplayUpgPassengerItineraries*" class="*DisplayUpgPassengerItinerariesEndPoint*") OR 
(source="*ApiUpg*" 
    class="*GetCustomersService*" OR 
    class="*ItineraryService*" OR 
    class="*RequestUpgService*" OR 
    class="*GetCustomersController*" OR
    class="*AuthenticationServiceFilter*")

| timechart span=1d count by class

It does exactly what I want except it produces several charts:

I want it to produce one chart with this exact labels altogether in one chart, how should I approach it?

[martin_mueller · Accepted solution]

Click the format button above the charts and toggle the multi-series mode.

[juanvarelagloba]

I feel silly now 😕 Thanks a bunch!