tscollect was leveraged to put data into time series index files. I am able to use tstat to calculate statistics. How would I go about leveraging timechart with tstat?
Here is what I want to work:
| tstats prestats=t field1, field2, field3 FROM my_ns | timechart avg(field1) by field2
What am I missing?
Thanks,
Joe
Joe,
Try using this:
| tstats prestats=t count as count FROM my_ns groupby field1,field2,field3,_time | timechart avg(field1) as field1_avg by field2