I have a search roughly equivalent to this: ...
| eval TimeHour=strftime(_time,"%Y-%m-%d %H:00:00")
| eval TimeDay=strftime(_time,"%Y-%m-%d")
| eval TimeWeek=strftime(_time,"%Y-%V")
| stats dc(transactionId) as "Users" by TimeHour, TimeDay, TimeWeek I want to create a line chart that allows the user to choose to group by hour, day, or week. What's the best way to achieve that? Maybe a string "date" isn't the right way to go. In any event, can I change which field from a search is the X axis rather than defaulting to something random? I'm frustrated with the lack of flexibility in visualizations. Thanks!
... View more