I have the follow search which shows the call count being made to a number of hosts every 15mins
"cs_dataowner_id="ICTO-18172" cs_stage="PROD" |search source="*dqs*"| search "FetchTradesHistoric invoked"|timechart count as calls by host span=15m"
I want to show on a chart for each 15 min span the host which has had the max count, the minimum count and the overall average count
The purpose being it gives the user an idea of what host is being over and under utilized and allows it compare it against the average
Any ideas how I can incorporate that in a chart ?
↧