Hi, thanks for the quick answer,
I cannot perform this search because the event which include name=installXsuccess do not include a type. Only a second event called name=emailsent include different types with one of them is type=askto_download.
Well, my real purpose is to sort by the date of email sent, so the whole search is this one and the subsearch seemed to me a good choice ->
type=asktodownloadad AND [search name=installXsuccess AND userid | table user_id ] | bucket _time span=1d | stats count by _time
with its limit.....
If you have a second answer it could resolve a week issue 🙂 !
... View more
I am trying to count the number of users who receive a mail and do a particular action later sort by the date of the email sent. It is more precisely to mesure the impact of an ad-campaign.
I am currently using a subsearch which give me good results :
name=installXsuccess AND [search type=asktoinstallad | table userid]
the subsearch gives me all userid who received emails, and I look for those who match with the event called installX_success.
This give me good results for a short period of two days but I want to extend it to period of several months...
The limite is double : the limite of the subsearch in number and amount of time it takes..
And I cannot sort my result by the date of the sent mail.
How can I do to deal with this request ?
... View more