this is my query till now based in the if condition that I want but I want to visualize them based on their colors in the query index=test | eval start=strptime(PlannedDate_1,"%d.%m.%Y %H:%M") | eval end=strptime(PlannedDate_2,"%d.%m.%Y %H:%M") | eval difference = start - end | eval red = if(difference<14 AND DateChanged="yes" ,total_time,0) | eval yellow = if(difference<20 AND difference>14 AND DateChanged="yes",difference,0) | eval green = if(difference>20 AND DateChanged="yes", difference, 0) |eval gray=if(DateChanged="no", difference, 0) | table red, yellow, green
... View more