I have events that contain the following data:
Time, Name, Value, Quality.
The Quality value can either be "Good" or "Bad", meaning the measurement was made or not. If Quality is "Bad", then the Value will be 0. Otherwise Value is a number (which can also be 0).
I am logging the data per second, but only if there is a data change. What I want is a search that always returns a value for every second, even if there is no event in that second.
If there is no event, then the event must be the same as the previous event logged.
I have tried to use
source="tcp:51112" | timechart span=1s Max(Value) by Tag | filldown
but that doesn't show me the Quality. I will also have many tags later on (up to 5000), so then I will have 5000 columns. I don't know if that is very efficient. This will be used for graphing 1-10 Tags at a time.
... View more