OK, I can extract the data fields I want, but I can't find an example of how to get something other than "count" on the Y Axis. If I do the following:
index="nagios" host="nagios1" servicename="My Service"| timechart values(servicestatus) by src_host
I get the data I want in tabular form, but the chart is still counting servicestatus events, whereas I'd prefer them to have different colors at least.
... View more