Hi
could you try this
....
| chart eval(count(<your field name>)/7) AS field_div_by_7 by channel time_hour
r. Ismo
Hi
could you try this
....
| chart eval(count(<your field name>)/7) AS field_div_by_7 by channel time_hour
r. Ismo
How would I round the results?
Time by time you must add ’ to surround <<FIELD>> to get SPL to known that it’s a field like
| foreach * [ eval <<FIELD>> = round(‘<<FIELD>>’,2)]
r. Ismo