I'd like to chart some data that removes detected outliers. Basically, there are a handful of data points that make the axis on the chart too large. I am trying to do something like:
_sourceCategory=database | parse "duration: * ms" as duration | timeslice by 10m | max(duration) by _timeslice | outlier _max window=20,threshold=10| where _max_indicator != 1
But I don't get just the results look very strange. Is there a way to remove outliers?
Please sign in to leave a comment.