I am trying to combine the results from 2 different search queries into a single chart.Is there a way to do this?
FIRST search:
source="a.csv" OR source="b.csv" OR source="c.csv" Company="x"
| eval Created=substr(Created, 1, 7)
| eval a=if(State="Closed",1,0)
| chart sum(a) AS closed_event by Created
SECOND search:
source="a.csv" OR source="b.csv" OR source="c.csv" Company="x"
| eval Created=substr(Created, 1, 7)
| chart count by Created,source
I want the first search as a line chart and the second search as a column chart,combining them.
Thanks in advance
... View more