So I'm trying to chart blocked traffic(IPs) over 7 days... the purpose to help locate beaconing traffic (this has worked at a previous job but im taking it a step further by only wanting to see days with values.... example: I would want to see results that only show, All days with values... Query works just see alot of days with 0 data Here's my query: index="pan_logs" sourcetype="pan:traffic" dest_zone="Public" src="10.11.16*" action=blocked | chart count(dest) by dest date_wday ... View more