Hi Guys,
I have the below query using that is using the shared timepicker: today, which is counting the events from 00:00 to 23:59.
How can I make it to start count the events from 9:00 to 23:59?
| dedup IDEVENT
| timechart SPAN=1H COUNT AS IDEVENT
| rename IDEVENT AS " PALLET QUANTITY"
Thanks a lot!
↧
