|
Hi all, I am having difficulty working around what I understand to be a hard limit of 10000 events for the HiddenPostProcess module. I am looking for a way to reduce the granularity of the events going across, but without success. Example problem code:
This will fail. It will produce results, but they will be capped to 10000. If I do
in an attempt to summarize the events a bit, I only get 1 row, for 1 day, in the reports generated, and the numbers in it make no sense. Is there something I am missing? Any and all help is greatly appreciated. |
|
bucket doesn't actually summarize at all. bucket just discretizes the value, e.g. in your search, it means for each event, snap the value of _time to the previous hour boundary. What you'd want to do is something like
That will give you 1 row per day per eventtype then in your hidden post process, you can do
|
