How to display the event count per index and distinct host count per index with a trend line.
have you tried this:
| eventcount summarize=false index=*
Hi, Did you want something like this : | chart count over host by index ??
| chart count over host by index
