Answers for "How to use timechart to get two different timechart averages, then get a sum of those two values in each time span?"
https://answers.splunk.com/answers/442235/how-to-use-timechart-to-get-two-different-timechar-1.html
The latest answers for the question "How to use timechart to get two different timechart averages, then get a sum of those two values in each time span?"Answer by renjith.nair
https://answers.splunk.com/answering/443273/view.html
Try this
(index=a OR index=b)|timechart span=4h usenull=f avg(session_count) by index|eval sum=a+bThu, 18 Aug 2016 12:41:33 GMTrenjith.nair