Something I've done as a neat work around is run the query to get a normal histogram, and then show the hidden field timestamp which exists on all message. I then generate a chart using that field and change type from mean so sum. It will then give you a chart matching the histogram above. You can then repeat the process for other search terms and stack the charts.
-- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/0082c2a6-aacf-47e4-bfd4-02b4564c40b0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.