Try this: | eval Created_Month = Created_Month . "/" . year | chart count over Created_Month BY Status | table Created_Month, Relevant, Missing, Non_Relevant | addtotals ... View more

Hi arjun , thanks a lot for the explanation. Can you please help me explaining the below code too : | eval e="$time_token.earliest$", l="$time_token.latest$"| eval e=case(match(e,"^\d+$"),e,e="" OR e="now" , "0" , true(), relative_time(now(),e)) | eval l=case(match(l,"^\d+$"),l,l="" OR l="now" , "2145916800", true(), relative_time(now(),l))| eval e=tonumber(e) , l=tonumber(l) | where order_date >= e AND order_date <= l ... View more

thanks arjun ... View more