I am new to slunk, I have to create one dashboard and compare current day with same day of last week based on request ids count.
index="test" s_name="test-app*" earliest=-0d@d latest=now
| bucket span=1h _time
| stats dc(message.req_id) as tcount by _time
| eval ReportKey="today"
| append [search index="test" s_name="test-app*" earliest=-7d@d latest=-6d@d
| bucket span=1h _time
| stats dc(message.req_id) as week by _time
| eval ReportKey="lweek"]
| timechart span=1h sum(week) as Lweek, sum(tcount) as Today by ReportKey
I want to create over lapping dashboard, like
Thanks in advance
... View more