Skip to content

Instantly share code, notes, and snippets.

@inodee
Last active May 2, 2023 06:37
Show Gist options
  • Select an option

  • Save inodee/6769c4a3d6ae0393e13eaccd4d66f606 to your computer and use it in GitHub Desktop.

Select an option

Save inodee/6769c4a3d6ae0393e13eaccd4d66f606 to your computer and use it in GitHub Desktop.
index=_internal sourcetype=scheduler savedsearch_name="* - Rule" scheduled_time=*
| fields dispatch_time scheduled_time
``` Pick the data point you want to use (hint: consider a dashboard dropdown) ```
| eval _time=scheduled_time
| eval H=strftime(_time, "%k"), M=strftime(_time, "%M")
``` Use a chart/viz or simply enable 'Heatmap' overlay from Format options ```
| chart useother=0 count over M by H
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment