Hi,  I am running a monthly report to show (unique users) logged in to the system (API) each month until the current time.  . . . . .  earliest=@mon latest=now | stats dc(CN)    But I have difficulty in calculating the the number of new users who have logged in per month as a running total to show a trend of new users over time.  The Query should run as following example:  If 50 distinct users log in in October and none of the 50 has logged in before, the total is 50. If 75 distinct users log in in November but 50 of them are the same that logged in in October, the number of new users is 25. Combined with the total for October, the total for November becomes 75.     ... View more

Hi Everyone,  Please, What is the search query to find: 1- The current health status of URL check for API services if (regex extracted field=200) achieved, means successful, otherwise all other services are failed? 2- At any selected time, the API availability percent time that each service is 200 (success)?  Thank you    ... View more