I didn't have a problem with the logic. I suggest that you do this to debug your problem:
| addinfo
| eval multiplier= (info_max_time - info_min_time) / 86400
| eval low_start = 1*multiplier
| eval low_end = 10*multiplier
| eval elevated_start = low_end
| eval elevated_end = 20*multiplier
| eval range=case(X>=low_start and X<=low_end,"low",
X>elevated_start and X<=elevated_end,"elevated",
1==1,"severe")
| table range X low_start low_end elevated_start elevated_end multiplier
This will probably show you what is happening. In my own test case, the X that I was generating was much larger than I thought it was...
You may need to adjust the multiplier or how you define your ranges.
Again, I couldn't find anything wrong with the original solution; this is just to give you more information about what it is doing...
... View more
