Hi, thanks for the quick answer,
I cannot perform this search because the event which include name=install_X_success do not include a type. Only a second event called name=email_sent include different types with one of them is type=ask_to_download.
Well, my real purpose is to sort by the date of email sent, so the whole search is this one and the subsearch seemed to me a good choice ->
type=ask_to_download_ad AND [search name=install_X_success AND user_id | table user_id ] | bucket _time span=1d | stats count by _time
with its limit.....
If you have a second answer it could resolve a week issue 🙂 !
Thanks
... View more