Hello everyone, Seeking your help. I have logs where Transaction_ID is unique to transaction. Depending on each transaction there can be multiple action. But if there is an error there would be a log generated with Action=Error. I have created two search One for successfull creation of transaction: `base_search` | search action=Error | timechart distinct_count(Transaction_ID) as Successfull And for errors. `base_search` | search action!=Error | timechart distinct_count(Transaction_ID) as Error. I would like to simply display these two in one chart to see number of successfull events vs failed. What would be the best method to combine these two ? Appreciate any guidance.
... View more