The following search was copied from 2015:

index=_internal earliest=-48h latest=-24h 
| bin _time span=10m 
| stats count by _time 
| eval window="yesterday" 
| append [
| timechart span=10m sum(count) by window]