Hi,
I understand what extract or kv command does. but what i don't understand is how the extracted values should be used in a timechart command.
for example.
event 1: 10=200,11=210,12=220
event 2: 10=300,11=310,12=320
event 3: 10=400,11=410,12=420
if i want to plot a line graph, which will plot all the values of 10,11 and 12 i'll use as following
source "someosource" | extract kvdelim="=" pairdelim="," auto=f
how should i use the subsequent timechart command. how will i refer the fields 10,11 and 12 in the timecharts.
please guide me since i can't find a complete one to one tutorial with samples for extract command.
thanks in advance.
... View more