My objective is to show new exceptions in a table/log format (things that appeared in the last 3 days). I created 2 queries, the difference being elapsed < 259200 and elapsed > 259200, where elapsed = ‘{{ sub (unixEpoch now) (unixEpoch timestamp) }}’
Now, I want to keep all occurences of values for label XYZ that appear in the first query but are not appearing in the second one.
Or I am missing something and can be done from a single query,again, the queries are almost identical excepting the elapsed thing.
I am using logql.
Bonus if is also distinct occurences. Thank you.
Solved, I used unless, you have to wrap the queries with count_over_time.