So how I ended up doing this was that I created multiple time range pickers. Originally, I wanted 1 time range picker and have comparison times (previous day, week, etc.) against that time. I decided it was easier for the users to just pick what timeframe they wanted to compare. I also incorporated multisearch for efficiency so it ended up looking like this:
|multisearch [search index=xx earliest=time1.earliest latest=time1.latest | eval type=current] [search index=xx earliest=time2.earliest latest=time2.latest | eval type=previous] | timechart span=1h count by type
Hope that helps.
David
... View more