Seasonal Hybrid ESD (S-H-ESD)

Comments

1 comment

  • Avatar
    Nitin Pande

    See if this help you.
    | formatDate(fromMillis(_messageTime), "MM-dd-YYYY HH:mm:ss.SSS EEE", "UTC") as time_field
    | parse regex field=time_field "^(?<month>\d+)-(?<day>\d+)-(?<year>\d+) (?<hour>\d+):(?<mins>\d+):(?<seconds>\d+).(?<milliseconds>\d+) (?<day_of_week>\w+)"
    | timeslice 1h
    | count by hour, day_of_week
    | transpose row hour column day_of_week

    0
    Comment actions Permalink

Please sign in to leave a comment.