index=_internal sourcetype=splunk_python sendemail ERROR
sourcetype=postfix_syslog status=sent | timechart span=1d count
index=_internal sourcetype=splunk_python sendemail ERROR
sourcetype=postfix_syslog status=sent | timechart span=1d count