Hi Rich,
The query Im working with is below, When I try to input a three digit number where the X's are for span it gives me an error.
Query: index=* eventName=* earliest=-4h@h latest=@h | bucket _time span=XXXms | stats count by _time,eventName,host | stats max(count) by eventName
... View more