I have a query that is looking at ticket updates. When I slice it by day I get a higher number of updates. What is happening?
Query sliced by date
The difference has to do with how the query is being aggregated. Aggregation is the strategy used to combine a list of data points into one point of data. For example SUM takes all the points of data and combines them into one total. D_Count is an aggregation strategy whereby the list of data points are combined by counting the number of distinct values in the list.
In the first report, the list of data to be aggregated is a list of all ticket ids of all the tickets that were updated by all the updates in the last month. However, each ticket can only be counted once as we are using D_Count for aggregation.
In the second report, there are five separate lists of tickets that were updated during that day. Each of them will use D_Count individually to count how may distinct ticket Ids appear in that list. If a ticket is updated on two separate days it will appear in the list of updated tickets on that day and be counted as distinct in each cell.