Hi, community members   I am trying to write a query that looks like this: | dbxquery query="select VULNERABILITY_LIFECYCLE, SOURCE, CLOSURE_FY, CLOSURE_QUARTER, CLOSURE_DATE from table [...]" | eval MONTH=strftime(strptime(CLOSURE_DATE,"%Y-%m-%d %H:%M:%S"),"%m") | eval SURSA = if(SOURCE!="QUALYS-P","Confirmed", "Potential") | chart count over MONTH by SURSA   My problem is that I want this chart to represent a financial year, not a calendar year. How can I do this? (also,  without skipping months)   Thank you for your support, Daniela ... View more

Hello,   I am trying to build a chart based on 3 fields: 2 calculated fields and a simple one: |  query="select OPEN_FY, OPEN_QUARTER, CLOSURE_FY, VULNERABILITY_LIFECYCLE, SOURCE, LAYER from table | [evaluate] DETECTION_TIME=if((OPEN_FY="21/22" AND OPEN_QUARTER ="Q2"),"new" , "old") | [evaluate]  SOURCE=if((SOURCE!="QUALYS-P"), "Confirmed", "Potential") | chart count(DETECTION_TIME) by SOURCE over(LAYER) the last line won't work. I would need to see the total number of vulnerabilities by source by  detection time and by layer. Is that possible? Thanks ... View more