I am using the same timechart search query:
'search
| timechart span=1d sum(xxx)"
when I set the time range picker to yesterday preset (05/01/2021) I get a value of 20,000,000,000, however when I change the time range picker to week to date and view the stats table the value for 05/01/2021 is giving a completely different result (less than half the original value) - why is this?
Hi @jamesboustead,
This is not expected behaviour. Do you see any error on "Job" section after running search? Or can you share a screenshot of event count indicator just below search bar? What do you see as event count and time-range?
Hi @scelikok
Getting no errors come up under the jobs section.
Please see screenshots of both event count indicators below:
It seems the second image for the week to date isn't picking up all the events it should, I'm not sure why,
Thanks