If I change the query part to this
<query>fields _time count timing</query>
the value timing disappears. This is unexpected, but it gives me the result I want and I am able to show the count value in a gauge.
In case the basesearch is important in giving the answer to this unexpected behavior, I'll provide it here.
`FMK_servers_auditLog` | fields _time processingTime | bin _time span=2s as sek2 | eval sek=strftime(sek2,"%H:%M:%S") | stats count avg(processingTime) as timing by sek | eval count = count*0.5 | eval timing = timing/10
... View more