Hi Splunkers,
I am stuck at how can I get counts for Yesterday and Last week. so ask is when select relative time from timer(in Dashboard) it should give me counts for yesterday in one panel and in another panel for last week.
For Example,
1) I am searching for 9pm to 10pm in my Dashboard so I want to setup a query that gives me same time data but yesterday's 9pm to 10pm (Query for Yesterday)
2) If I run same data then other panel should give me counts for last week at same time (Query for last Week)
so I am looking for two separate queries for both.
Basic Query:-
index::name type=sample_events "service"="auth" "successReason"=VALID | stats count
... View more