As I understand, dedup command will filter the complete set of results and remove any duplicate fields.
What if I want it to remove daily duplicates only? In other words, I would like to have duplicates, if their events happened on different days.
Is this possible?
The mday does the same as "|timechart span=1d count" would. However it still removes all of the duplicates. (does not save duplicates if they happen on different days)