I'm trying to create the below search with the following dimensions. I'm struggling to create the 'timephase' column.
The 'timephase' field would take the same logic as the date range pickers in the global search, but only summon the data applicable in that timephase (ie. 1 day would reflect data of subsequent columns for 1 day ago, etc). I tried to approach it with a `eval case`, but would run into a mutual exclusion problem (the data captured in "1 day" would be excluded from "1 week", even thought it should be counted).
Does anyone have any recommendation for approaches to this?
![alt text][1]
[1]: /storage/temp/285674-time-categories.png
↧
