Forum Discussion
Henrik Olofsson
Nov 17, 2017Copper Contributor
Render two differenet timebuckets
Is there a convenient way to render two different timebuckets in the same chart?
...
| summarize avg(something) by bin(timegenerated size a, size b)?
Regards,
Henrik
- Meir_Mendelovich
Microsoft
Hi,
You need to summarize them separately and union them to have a single chart:
union (Heartbeat| where TimeGenerated > ago(30d)| summarize Col1=count() by bin(TimeGenerated, 3d)),(Heartbeat| where TimeGenerated > ago(30d)| summarize Col2=count() by bin(TimeGenerated, 2d))| render timechartThanks,Meir :->- Henrik OlofssonCopper Contributor
Thanks Meir, much appreciated.