-
1 year, 11 months ago
Thomas Chase wrote a new post
Original posted in 2015 Testing an issue with bracketsThe following search was copied from 2015: index=_internal earliest=-48h latest=-24h | bin _time span=10m | stats count by _time | eval window=”yesterday” | append [ | timechart span=10m sum(count) by window]