$ 0 0 Considering a field "user_name". What could be the search to find the anomalies per hour for each user_name in a day?