My search looks similar to the one below:
index=mock_index source=mock_source.log param1 param2 param3
| rex field=_raw "Latency: (?<latency>[0-9]+)"
| timechart span=5m avg(latency)
An example event:
2022-08-16 14:04:34,123 INFO [stuff] Latency: 55 [stuff]
What have I got wrong in my search that it doesn't draw a graph?
Searches do not draw graphs by default. You can click on the Visualization tab to see and modify a graph of your search results.
Searches do not draw graphs by default. You can click on the Visualization tab to see and modify a graph of your search results.