Hi @colinmchugo , If I understand correctly, you are looking for a solution like this. I'm sharing this approach so that anyone landing on this page can use this logic for comparing today's, yesterday's, and last week's hourly data. index = _internal log_level="*" component="*" earliest=-8d@d latest=@d | timechart count span=1h |timewrap 1d series=short |fields _time, s0,s1,s7 | rename s0 as Today, s1 as Yesterday, s7 as Lastweek If anyone finds this helpful, please upvote and share your karma! || Keep Splunking, Keep Securing! 🔥🛡️||     ... View more