I have extracted a field from log and named it elapsedTime
... | rex "milisecond([\\\]{1})([\"]):(?\d+),"
Now I need to create a timechart that shows side-by side number of events per day and number of events with elapsedTime > 10000
↧