Canvas filter visualization based on some other timestamp field

i am trying to use canvas and i have placed a time filter which is using column modified_date as column.

Now i am creating a metric visualization and it is not showcasing anything when above column is selected as time field.

also, when i am trying to create visualization using expression editor, its giving me count of all document in that particular index rather than based on time selected

| selectFilter from=p2p
| esdocs index="abc-2023.08.23-000004"
| math "size(number)"
| metric "total count"
| render

any suggestion is appreciated. thanks

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.