using stats with a by on 2 fields works
`...| stats max(kpi1) as "kpi1" max(kpi2) as "kpi2" by field1 field2`
but can I do the same using timechart (so far I don't think i can)
`...| timechart max(kpi1) as "kpi1" max(kpi2) as "kpi2" by field1 field2`
a work around I have is to use `strcat` which would be something like"
`...| strcat field1 "-" field2 field1_2 | timechart max(kpi1) as "kpi1" max(kpi2) as "kpi2" by field1_2`
Just wondering what other people do?
↧