Hi, I'm wondering whether someone may be able to help me please. I'm using the following to extract metrics for a number of dimension values: `wso2_wmf(RequestCompleted)` request.detail.Context="levy" OR request.detail.Context="rates-list" OR request.detail.Context="emp" OR request.detail.Context="identity-verification" | fields request.detail.Context | timechart span=1d limit=100 count by request.detail.Context | fillnull value=0 request.detail.Contex The problem I have is around the zero values and the 'fillnull'. It basically doesn't work. I've tried shifting the position of the row within the query. I've then tried using usenull=t usestr=0 in the timechart line, but none of this works. I just wondered whether someone may be able to point out where I've gone wrong? Many thanks and kind regards Chris ... View more

Hi, I wonder whether someone may be able to help me please: I'm using the following query to record customer ratings and comments: `frontend_wmf(ExitSurvey)` | fields detail.whatDoYouThink detail.comments | table detail.whatDoYouThink detail.comments This produces, as I would expect a table of ratings and customer comments on the same row for the given number of events for the day: Which looks like: What I'd like to do, almost as a second set of metrics, is to produce a stats count by the field detail.whatDoYouThink but within the same table. Could someone tell me please is this possible? Many thanks and kind regards Chris ... View more

Hi I wonder whether someone could help me please. I'm trying to put together a dashboard whereby the panels are hidden or displayed via a 'Mutltiselect' field. This is the code I have: <form> <label>based on choice2</label> <fieldset submitButton="false"> <input type="time" token="field1"> <label></label> <default> <earliest>-60m@m</earliest> <latest>now</latest> </default> </input> <input type="multiselect" token="service_tok" searchWhenChanged="true"> <label>Select a Service</label> <choice value="*">All</choice> <choice value="show_bob">Bob</choice> <choice value="show_tom">Tom</choice> <change> <condition label="Bob"> <set token="show_bob">y</set> <unset token="show_bob"></unset> </condition> <condition label="Tom"> <set token="show_tom">y</set> <unset token="show_tom"></unset> </condition> <condition label="All"> <set token="show_bob">y</set> <set token="show_tom">y</set> </condition> </change> </input> </fieldset> <row> <panel depends="$show_bob$"> <table> <title>SOA Request Count</title> <search> <query>host=abcd source="/access.log*" | timechart span=1hr count by host</query> <earliest>-4h@m</earliest> <latest>now</latest> </search> </table> </panel> </row> <row> <panel depends="$show_tom$"> <table> <title>OSB Request Count</title> <search> <query>host=abcd source="access.log" | timechart span=1hr count by host</query> <earliest>-4h@m</earliest> <latest>now</latest> </search> </table> </panel> </row> </form> But the issue is, is that panels do not display or hide so could someone have a look at this please and let me know where I've gone wrong. Many thanks and kind regards Chris ... View more

Hi, I wonder whether someone maybe able to help me please. I'm using the following rex to extract the word ID from a text string, which can be written in many permutations, e.g. ID, Id, id. | rex field=text "/^|[^a-zA-Z](?<a>(?i)id)[^a-zA-Z]|$" Could someone tell me please, is there a simpler way to write this? Many thanks and kind regards Chris ... View more