Hi, I need a chart from multiple source and multiple search terms.
search 1: index="SessionController" host = "abc01*" | stats distinct_count(session) by date_hour
search 2: index="CompleteSale" host = "xyz*" | stats distinct_count(order) by date_hour
I want a line graph that will show number of requests (i.e. count of Session's) and the orders per hour.
Thanks in advance.
If the session and order fields are exclusively used on the source where you want to count them, you can simply combine your searches:
(index="SessionController" host = "abc01*") OR (index="CompleteSale" host = "xyz*") | stats distinct_count(session) distinct_count(order) by date_hour