Hi,
I have one problem here.
I need to create a search with 2 groups, and create a chart with result.
Example, my search :
index=inc_ group="Ti" OR group="Support" OR group="admin" OR group="helpdesk" | stats count(eval(match(group,"TI,Support"))) AS Operation , count(eval(match(Grupo,"admin,helpdesk"))) AS Administrative
How create a graph with this query?
I try using | timechart count by Operation|Administrative but i not have success
Help 😞
... View more