Hi,
i want to see how many messages are send, which are between 0 and 1 mb, between 1MB and 2MB, 2 and 3 etc, but I can't even visualize 1 option 😞
I have this: index, host source etc.
| eval if((LENGTH >= 0 AND LENGTH <= 10000000), "Between 0MB en 1MB", "Rest")
| stats count(LENGTH)
Note: LENGTH= shown like this: [LENGTH=365] and is an interesting field (num), shown in bytes.
So i have 2 questions:
- I receive this error with above eval: *Error in 'eval' command: Type checking failed. 'AND' only takes boolean arguments. *
What is wrong with this argument?
- And can someone help me fixing this visualization?
... View more