How to display the event count per index and distinct host count per index with a trend line.
have you tried this:
| eventcount summarize=false index=*
Hi,
Did you want something like this : | chart count over host by index
??