Hello, I am new to splunk and wanted to try visualizing whether a break fix that was implemented is actually working. I made a search that shows the count of errors by host:
sourcetype=st ThIsMyError | stats count by host
I was hoping to plot the error count or frequency by time to see if a configuration change made in an attempt to solve the problem is working. This chart would show error frequency (was previously once every 3-7 days) decreasing after the fix. I do not understand how to calculate and plot the changing frequency over time.
