LogReduce can now be used with the timeslice operator. This allows you to visualize how signatures detected with LogReduce are changing over time.
| timeslice by 1h
| LogReduce by _timeslice
| transpose row _timeslice column signature
Below, we can see how top errors in our checkout service have a spike at 11pm, and that the occurrence of each type of error as a percentage remains relatively stable: