Try something like this
your base search earliest=-1d@d latest=now | where strftime(_time,"%H:%M")="08:00" | eval Period=if(_time>relative_time(now(),"-24h"),"Today","Yesterday") | eval temp=1| chart values(response_time) over temp by Period | fields - temp
Try something like this
your base search earliest=-1d@d latest=now | where strftime(_time,"%H:%M")="08:00" | eval Period=if(_time>relative_time(now(),"-24h"),"Today","Yesterday") | eval temp=1| chart values(response_time) over temp by Period | fields - temp
thank you. this helps. what if I need this to be searched over three days for example today, yesterday and a week ago at the same time.