I have this search query sourcetype="CurrentWeatherSGMap" Message="Yishun" | eval Description=case(currentsummary="Rain", "Poor",currentsummary="Thundery Showers","Poor", currentsummary="Cloudy", "Fair", currentsummary="Partly Cloudy", "Excellent") | chart dc(Description) over _time by Description | eval Poor=if(Description==Poor, "1", "1"). How can I set the chart to display from 12am to 12am time range daily ?
Or can I use advanced xml to display my result ?
You can explicitly define earlest=-1d@d latest=0d@d if only the previous day's data is to be displayed.
I would suggest using the following in your search.
let me know if that works for you.