Hi,
I've try to extract some results of my indexed data and make a sum of these results in a result column.
But timechart forbids me to display more than 10 results columns and i must get 16 differents columns.
Moreover, a column "other" appears with a number which i don't know from where he is..
So my question is, is it possible to extends the number of timechart column ?
This is my researche : (XXX contains 16 differents values)
index="A" sourcetype="B" | timechart eval(round(avg(nbr_teams),0)) by XXX | fillnull value=0 | rename _time AS Time | eval Time=strftime(Time, "%B")
=>
You can use timechart limit=16
thank you,
I thought it was just a restrictive attribute