Hi, I wonder whether someone could help me please.
I've put together this query:
| multisearch
[ search `frontenda_wmf(Payments)` detail.dueDate="2018-01-31"]
[ search `frontendb_wmf(RequestReceived)` detail.queryString="*AUTHORISED*HM00*"]
| stats values(detail.dueDate) as due values(detail.queryString) as query values(auditSource) as auditSource values(auditType) as auditType by tags.IP
| where (auditSource="frontenda" AND auditSource="frontendb" AND auditType="Payments" AND auditType="RequestReceived")
| timechart span=1d count(due)
The problem I'm having is that I can't get the timechart to work. I've also tried just using chart and that doesn't work either.
Could someone possibly look at this please and let me know where I've gone wrong?
Many thanks and kind regards
Chris
↧
