Thanks Sideview, I was looking for the third one. ... View more

If you select same date in both textboxes , it is automatically equivalent to 1 day. i.e. if you are selecting 05/27/2015 in both text boxes, it actually means 05/27/2015 (00:00:00) to 05/27/2015 (24:00:00). As of now, I think there are not any available parameters under timerangepicker module which can help us achieving this. ... View more

It is possible that when you are running the search for longer duration, values for some rows in one of the searches is null which is resulting in gap. try to include fillnull at the end of both searches and run again. index=main sourcetype="playerdata" | timechart span=1h dc(PlayerId) |fillnull value=0 | appendcols [search index=main sourcetype="playerdata" ActionTaken=observe | timechart span=1h dc(PlayerId)|fillnull value=0 ] ... View more

well i am using ver. 6.2.1, and it works fine. (Simple XML) ... View more

Suppose your scheduled Report Name is "Report1" First refer it under search separately: <search id="MainSearch" ref="Report1"> <query></query> </search> Then in visualizations, <chart> <title>Events over Time</title> <search base="MainSearch"> <query>timechart count</query> </search> <option name="charting.chart">column</option> </chart> <table> <title>Top Sourcetypes</title> <search base="MainSearch"> <query>top limit=100 sourcetype | eval percent = round(percent,2)</query> </search> <option name="displayRowNumbers">true</option> </table> ... View more

Please share your search. Also for finding issue, try to run your query in small parts, like if your query is index=abc sourcetype=xyz | <part1> | <spart2> | stats <somefunction> by <field> so first run normally before part 1 then with part 2 , this will help you in determining which part is creating issue. ... View more