I would like to find a error occurs in the past 30, 60 and 90 days. How to do that?
Use relative time to see the events for last 3 months and then use date_month to sort the events by month. Let me know if it works for you.
