Answer by warren for Count the number of different value of a field, and get the average per minute

If I understand you correctly, you probably want a timechart instead:

index=ndx sourcetype=srctp domain=* source="sourceurl"
| timechart span=1m dc(domain) as count by source 

from User warren – Stack Overflow https://stackoverflow.com/questions/66110589/count-the-number-of-different-value-of-a-field-and-get-the-average-per-minute/66120697#66120697
via IFTTT