I have the following search as I'm trying to compare yesterday's count to today's count per hour and I am seeing events per hour for latest_day, but no events per hour for today
index=foo
| timechart count span=1h
| timewrap 1d
Is the fact that I have the span set to 1h and timewrap set to 1d an issue?
Thx
↧
