timechart - how do I combine these two charts into one?

[zzztimbo]

I have the following query:

... | timechart avg(Latency)

Can I combine this with:

... | timechart count by responseCode

Basically I'd like to have these two charts share the same Y-axis.

[sideview · Accepted solution]

Only way I can think of is the somewhat brute force way of using appendcols and running the search twice:

<your search> | timechart span=1d count by responsecode | appendcols [ <your search> | timechart avg(Latency) as avgLatency | fields avgLatency ]

However maybe someone else can see some nutty way of using bin _time and stats to get you there.

[abhayneilam]

Awesome, helped me a lot !!

Thanks !!

[nnips]

thanks you so much

[dreamwork801]

Helped me too!