Very new to this pipeline way of thinking, so apologies if this is trivial...
I am logging every 10 seconds the total number of X which have been cached. So this is incremental: 1, 2, 5, 8, 9, 15 etc. So each log message contains the following TotalCached=x where x is the number cached.
Now I want to chart the rate at which they are being cached. For the range of numbers above, I would like to see the values 0, 1, 3, 3, 1, 6 on a timechart.
I have been told to look at delta and streamstats to no avail.
This is close to what I want:
source="..." FeedSource="PinnacleApi" SportId="Football" | delta TotalFixtures p=1 as fixDelta | timechart sum(fixDelta)
However I'd like to take off the FeedSource and SportId, and have the timechart display results by FeedSource or SportId. When I do do this it makes some strange results!