Describe the bug
%dpl
index=example earliest=-5y |eventstats
The above query returns:
Index: 0, Size: 0
Expected behavior
It should perform various aggregations like count, average,sum, distinct_count e.t.c on all available fields
How to reproduce
Run the query
Screenshots
Software version
pth_10 version: 8.3.1
pth_03 version: 9.3.0
Desktop (please complete the following information if relevant):
Additional context
Describe the bug
%dpl
index=example earliest=-5y |eventstats
The above query returns:
Index: 0, Size: 0
Expected behavior
It should perform various aggregations like count, average,sum, distinct_count e.t.c on all available fields
How to reproduce
Run the query
Screenshots
Software version
pth_10 version: 8.3.1
pth_03 version: 9.3.0
Desktop (please complete the following information if relevant):
Additional context