How to find min and max per hour during day by host ?

[exmuzzy]

If I use such SPL

index=_internal 
 | timechart span=1h count by host
 | stats max(*) AS *."max", min(*) as *."min" | transpose

this produce min and max mixed in one column but I would like separate max and min column

[kunalmao]

Can you please give a view of how you want the result and min and max of what ?

[gcusello]

Hi exmuzzy,
let me understand: do you want max in a column and min in another one?
if this is your requirement delete the transpose command!

 index=_internal 
  | timechart span=1h count by host
  | stats max(*) AS *."max", min(*) as *."min" 

Bye.
Giuseppe

[gcusello]

Hi exmuzzy,
I have

giuseppe-pc.max giuseppe-pc.min
       102494           0

Bye.
Giuseppe

[exmuzzy]

No, I would like to rich such result

                              max       min

giuseppe-pc 0 334
backeтd 12 502

[gcusello]

Hi exmuzzy,
did you tried?

index=_internal 
| bin_time span=1h
| chart max(count) AS Max  min(count) as Min BY host

Bye.
Giuseppe