title: Timechart with distinct_count per day
body: <p>I have a query which shows me the number of hosts for which a given event is logged more than three times within a single day:</p>
  <pre><code>index=desktopevents &quot;target&quot; 
  | stats count by host | dedup host 
  | where count &gt; 3 | stats dc(host)
  </code></pre>
  <p>What I can't figure out is how to use this with <code>timechart</code> so I can get the distinct count <em>per day</em> over some period of time. The naive timechart outputs cumulative <code>dc</code> values, not per day (and obviously it lacks my more-than-three clause):</p>
  <pre><code>index=desktopevents &quot;target&quot; 
  | timechart span=1d dc(host)
  </code></pre>
  <p>I thought this might work but the chart is blank:</p>
  <pre><code>index=desktopevents &quot;target&quot; 
  | stats count by host | dedup host 
  | where count &gt; 3 | timechart span=1d dc(host)
  </code></pre>