| timechart span=10m count by host |rename a-b-1 as a1 |rename a-b-2 as a2 |eval total_requests=a1+a2 Above works as expected and chart displays with total_requests correctly But when i tried | timechart span=5m count by host |eval total_requests=a-b-1+a-b-2 then it dont work(I tried keeping both in single quotes and double quotes but didnt worked).Its not displaying the total Below is the sample data and what i am looking for Time a-b-1 a-b-2 Total_requests 0:00 2 3 5 0:10 4 6 10 0:20 8 10 18
... View more