I'm trying to run an floor command on a column in a timechart in order to get a whole number.
... | timechart span=10m eval(floor(count(LINE)/5)) as logins by USERNAME
The search fails with Error in 'timechart' command: The eval expression has no fields: 'floor(count(LINE)/5)'
The search works if I take out the floor() eval(count(LINE)/5)
. How can I get this to work?