- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
07-16-2024 01:30 AM
Hi All,
withing query builder i have a very basic query as per below..
dataset = metrics_source
| fields _vendor , _product , total_size_bytes
which shows me the data sources and the amount of ingested data per source which is fine over a period specified in (24hr/days etc)..
what i am trying to achieve is for a period of 24 hours, for it to show how much data being ingested on an hourly basis per device
any idea how to?
thanks in adv
07-16-2024 06:50 AM
Hi PA_nts,
You need to use the bin stage for this.
dataset = metrics_source
| fields _vendor , _product , total_size_bytes
| bin _time span = 1h
| comp sum(total_size_bytes) as total_size_bytes by _time, _product
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!