Matt_Lowe Sorry for the slow response, just been focused elsewhere due to deadlines.
In my post above, you see in the grid there are three columns, "New" "Fixed" and "ReOpened" for each IP address.
When I try to get all three columns to display in the chart visualisation, "New" will never display 😞
If I try and project "New" by itself it tells me "Could not find appropriate columns for Bar chart."
Ideally what I set out to achieve was to have as many vertically aligned IP addresses as was readable along the bottom (x) axis each with stacked bars above showing "New", "Fixed", "Active" & "ReOpened" for each IP address for the 'nn' top-hitters and the total number of tickets on the vertical (y) axis
QualysHostDetection_CL
| mv-expand todynamic(Detections_s)
| extend Status = tostring(Detections_s.Status)
| top 1500 by IPAddress
| where isnotempty(IPAddress)
| summarize ['New'] = countif(Status == "New"), ['Fixed'] = countif(Status == "Fixed"), ['ReOpened'] = countif(Status == "Re-Opened"), count() by bin(TimeGenerated,30d), IPAddress
| project IPAddress, New, Fixed, ReOpened