I'm trying to count unique users over time.
So far, I'm using this query to count total number of events over time: * | parse "UserId\":*," as userId | timeslice by 1h | count by _timeslice
Now I'd like to filter the count by distinct userId. Can someone help me build this query?
Please sign in to leave a comment.