Hi there, I have a query like this:   message="A" | timechart count AS AA | appendcols [search message="B" | timechart count AS BB]    I want to plot this on the same chart with two lines, AA and BB. But AA have a length of 20 and BB has a length of 60. I believe this is why I am not seeing any line? if so, how can I pad AA with extra 40 zeros so that it is the same length as BB? Many thanks ... View more

Hi there, I have spent 3 days looking for an answer with no luck, I'm hoping that someone here can help. I want to create one panel with one chart. I want the chart to have multiple lines that are created by different queries. I want to have a checkbox for each query/line, so that when you check the box, its corresponding query gets run and the resulting line appears. Git example let's say I have the following queries: 1) Search message = "abcd" | timechart count AS abcd 2) Search message = "efgh" | timechart count AS efgh 3) Search message = "ijkl" | timechart count AS ijkl And so on... I want these checkboxes: A, E, I....  let's say When none of the boxes are check I don't want to see any lines on the chart. When I click A I want to see the data for abcd search appear on the chart. When I click on E, I want to see the efgh line appear on top of the abcd line. When I click I, I want to see the ijkl line appear on top of the other two. If I uncheck E, I want to see efgh line disappear but other two remain... You get the idea.   I want to add as many queries as I want, and have a checkbox for each query, and show the result line of that query on top of other lines when I click on its checkbox.   Is this possible? I'd appreciate any help for this. Many thanks, Skye     ... View more