Try this: index=foo source=bar | timechart span=1m count | timechart span=1d max(count). This will give you the max count per minute for each day. ... View more