I'm trying to run a bucket/histogram of data but I want to display buckets that have zero count. By default, bucket seems to hide those entries.
Quick example -- histogram of CPU-load on a group of machines. Each machine logs cpu-load as 'x' every 15min, I pick the latest entry for each host and bucket that data:
(search command) |stats first(x) as ff by host |bucket ff bins=10 start=0 end=10 |chart count(ff) over ff
Is there a way to tell bucket (or chart) that it should display all bins, even if they are zero-count?
You should probably just not invoke
bucket at all, and just use
chart count(ff) over ff bins=10, or use
makecontinuous instead of