I have data where I get an activitystatus and I am doing the following:

| summarize
    Count = dcount(tostring(data.traceId)) by activityStatus = toint(data.activityStatus), result = toint(data.result), resultDetail = tostring(data.resultDetail)

and I get a nice output like this:

What I’d like to do is change this so that I bucket the counts by day, something like this (which obviously doesn’t work or I wouldn’t be posting here) 🙂

Count = dcount(tostring(data.traceId)) by activityStatus = toint(data.activityStatus) by bin(timestamp, 1d)

Is this possible?