Hi,
I have two values that I would like to draw on one time chart. Currently I have the following query that doesn't work the way I want it to.
(sourcetype="Application" Type = "A" AND WorkTime > 0) AND Project="ABC" | chart values(WorkTime) as ATime over _time | appendcols [ search (sourcetype="Application" Type = "B" AND WorkTime > 0) AND Project="ABC" | chart values(WorkTime) as BTime over _time ]
The lines for those two values are not drawing correctly on the chart. Did I do something wrong in my query? Is there an example of chart overlay using SideView Util Editor? I know how to do that in XML...Just wondering if there is a way in SideView Util Editor to do that same.
Thanks.