I would like to compare the result count of two search queries in one column chart (one column for each query and day)
The two queries are:
1) `index=ex_prod sourcetype=backend /finish status:200 | timechart span=1d count by host`
2) `index=ex_prod sourcetype=backend /registration status:403 | timechart span=1d count by host`
I think I need to store the search results of the two queries in an eval but I couldn't get it work as it is a string search and not just fields. Can anyone help me?
↧