Hello,
I am trying to have timespan to show results for every 2 mins but it seems to reflect the default of 5 mins
earliest=-180m
index=apps
sourcetype=pos-generic:prod
"com.grubhub.pos.generic.orders.service.OrdersService: Received request to change status"
partner_account_name="Level Up"
| dedup orderId
| search status=REJECTED
| timechart count by status minspan=2m
Try this instead for your last line:
| timechart span=2m count by status
Try this instead for your last line:
| timechart span=2m count by status
ahh i was using at the wrong place, thank you it works.