| xyseries Xaxis _time Yaxis
@corehan - Why you are using untable command?
By default timechart command put _time on the X-axis. Please try removing stuff after sort command and see if you get what you need.
-----
I hope this helps!!! If it does consider upvoting!!!
@corehan - Since you are using timechart command with groupby, your Y-axis field name is not the "count".
If you look at the results it's not one-dimensional results here. So if you want to filter for those for which the total count is not greater than 3 then you can use the following search:
<base search> | timechart span=1h count(REQUESTNAME) by ilce
| transpose
| addtotals
| search Total>3
| fields- Total
| transpose header_field=column
| fields - column
Please post the screenshot of the result if this does not work.