Hi,
is this what you want?! works find for me:
index=_internal | timechart limit=5 useother=t count by host
No, I would like to have something like this:
index=_internal | chart limit=5 useother=t count by host