Hi Drew, That's a neat trick!. Thanks for sharing. Maybe change type to *total* instead of *sum* gives even more accurate chart?
Thanks, On Fri, May 20, 2016 at 9:17 AM Drew Miranda <[email protected]> wrote: > Something I've done as a neat work around is run the query to get a normal > histogram, and then show the hidden field timestamp which exists on all > message. I then generate a chart using that field and change type from mean > so sum. It will then give you a chart matching the histogram above. You can > then repeat the process for other search terms and stack the charts. > > -- > You received this message because you are subscribed to a topic in the > Google Groups "Graylog Users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/graylog2/csLsSJTg6j0/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/0082c2a6-aacf-47e4-bfd4-02b4564c40b0%40googlegroups.com > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAGv4AHp4x9nzXkMB3iwRsQao1MAOoz4Fs7mvWxpHSd3zdwhmFQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
