Hello All, I was extracting some volume data for PE testing from prod systems, using following query  I am expecting to get stats from 9AM to 6PM event counts with respect to proxy names. but following code creating stats for entire day please help me to remove these extra data.  Query  index= index_Name environmentName= Env_name clientAppName="App_Name" | eval eventHour=strftime(_time,"%H") | where eventHour<18 AND eventHour>=9 | timechart count span=60m by proxyName result : TIme Proxy1 proxy2  2022-02-16 06:00 0 0 2022-02-16 07:00 0 0 2022-02-16 08:00 0 0 2022-02-16 09:00 27 34 ... View more