Hi All,
I am trying to create a scatter dashboard or similar in Dashboard Studio to show debit transaction amounts over time.
A query like this works well in Search, but translates poorly to the dashboard:
source="Transaction File.csv" "Debit Amount"="*" | stats values("Debit Amount") BY "Posted Transactions Date"
I am aware I likely need to convert the the date from string format to date format within my search, something to the effect of: |eval Date = strptime("Posted Transactions Date","%d/%m/%y")
But I am struggling to get the final result.
I have also played around with using the _time field instead of Posted Transaction Date field and with timecharts without success which I think is likely also a formatting issue.
Eg:
source=source="Transaction File.csv" | timechart values("Debit Amount")
As there are multiple debit amount values per day in some cases, I would ideally like a 2nd similar dashboard that sums these debits per day instead of showing them as individual values whilst also removing 1 outlier debit amount value of 7000.
Struggling a bit with the required search(s) to get my desired dashboard results.
Any help would be appreciated, thank you!
... View more