I have a time chart that displays the average duration of calls for each day in the time range, the time range is set with a time picker. The call duration is parsed out using the rex command.
rex field=_raw "Duration : (?\d+):(?\d+):(?\d+\.\d+)" | eval dur = (hh * 3600) + (mm * 60) + ss | timechart span=1d avg(dur)
The current results look like:
![alt text][1]
I am looking for something like this with the dashed line like so:
![alt text][2]
[1]: /storage/temp/275731-screenshot-7.png
[2]: /storage/temp/275732-download.png
↧