Thanks richgalloway. for your time. but still i am not getting what i want. let me rephrase my question: I have events for the period of time and i would like to get how many different messages including duplicates. For example: I have system events for the last 12 months. And these events have field name called Messages. Example of messages as below: In the above list: Message contains "logon failure" counts 7 times, "DCOM counts 2 times, "Group Policy failed" counts 2 times, "RPC" counts 2 times, "DomainController" counts 2 times, "DSS" counts 3 times. How do I show the line graph, by top counts over time frame – X axis is time, Y axis is the count – with one line for each different messages. Thanks for your time.
... View more