Hi,   I have two fields as Created_time and Updated_time. Example:  Created_time   ----    Updated_time 9.15am      ----    10.35am   Is it possible to bring both the field values on x-axis (like a range....like first value of x-axis is 9.15am it shows a particular count and the second value of x-axis is 10.35am showing count)   Is this possible. Kindly help me with this ... View more

I have a search query as sourcetype="file.csv"|eval Created_Date = mvindex(split(Created," "),0)| stats count as Issues_created by Created_Date which gives me output as  Similarly another search query as  sourcetype="file.csv" Resolved|eval Created_Date = mvindex(split(Created," "),0)|stats count as Issues_Resolved by Created_Date basically i am filtering out events which have status as Resolved and creating  events which gives me output as  I want to combine these two queris to give me bar chart which will display the statistics as Created_Date ---- Issues_created ---- Issues_Resolved 01-01-2020 8 8 01-02-2020 9 0 01-03-2020 6 1   Kindly help me with this.. ... View more