This message was deleted.

ooooh that's an interesting question @Zhichao Gao, let me try formulating an example query to see if I can demonstrate this. Question: are you trying to sum data.fcp within a certain timespan? So like if you have two log lines in the same minute that are

data.fcp:500

you'd want the behavior to be plotting a value of

1000

?

generate a line chart based on the properties of the logs. How do we write rules in the Query Builder?

Use count. The body can be filtered like this

body.data.e = local

. You can use any key, operator, but the key needs to have prefix

body.

I tried putting the data on the same layer to handle this and it seems to be ok.