I got the query that shows count every hour using timechart command
<<my query>> | timechart span=1h count(path)
What I would like is to show both count per hour and cumulative value (basically adding up the count per hour)
How can I show the count per hour as column chart but the cumulative value as a line chart ?
--Sunray
This can help..
<<my query>> | timechart span=1h count(path) | streamstats sum(count) as cumulative_data
This can help..
<<my query>> | timechart span=1h count(path) | streamstats sum(count) as cumulative_data