Forum Discussion
Render two differenet timebuckets
Is there a convenient way to render two different timebuckets in the same chart? ... | summarize avg(something) by bin(timegenerated size a, size b)? Regards, Henrik
Meir_Mendelovich
Microsoft
MicrosoftHi,
You need to summarize them separately and union them to have a single chart:
union (
Heartbeat
| where TimeGenerated > ago(30d)
| summarize Col1=count() by bin(TimeGenerated, 3d)
),
(
Heartbeat
| where TimeGenerated > ago(30d)
| summarize Col2=count() by bin(TimeGenerated, 2d)
)
| render timechart
Thanks,
Meir :->
Thanks Meir, much appreciated.
