<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Format to show data in Splunk Enterprise</title>
    <link>https://community.splunk.com/t5/Splunk-Enterprise/Format-to-show-data/m-p/669653#M17917</link>
    <description>&lt;P&gt;Hi.&lt;/P&gt;&lt;P&gt;Colleagues.&lt;BR /&gt;Somebody help me?&lt;/P&gt;&lt;P&gt;I have this query by current day (figure 1)&lt;/P&gt;&lt;P&gt;index=xxxx sourcetype=xxx earliest=-d@d latest=now |table control indicador cumplimiento| sort control&lt;BR /&gt;|chart values(cumplimiento) over control by indicador&lt;/P&gt;&lt;P&gt;the fields are: Empleo, Huérfanas, Uso, Control _time and Month&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="figure1.png" style="width: 741px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/28241i4D3A4A4BEDE3BA4B/image-size/large?v=v2&amp;amp;px=999" role="button" title="figure1.png" alt="figure1.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;My problem is, I need also show data as showing in figure 2 (by month), but I don´t find the way to show as the figure (with month on top)&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="figure 2.png" style="width: 945px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/28240i70BDA2D426B38E33/image-size/large?v=v2&amp;amp;px=999" role="button" title="figure 2.png" alt="figure 2.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Somebody were a similar problem?&lt;/P&gt;</description>
    <pubDate>Fri, 24 Nov 2023 14:34:30 GMT</pubDate>
    <dc:creator>Gabriel_CCI</dc:creator>
    <dc:date>2023-11-24T14:34:30Z</dc:date>
    <item>
      <title>Format to show data</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Format-to-show-data/m-p/669653#M17917</link>
      <description>&lt;P&gt;Hi.&lt;/P&gt;&lt;P&gt;Colleagues.&lt;BR /&gt;Somebody help me?&lt;/P&gt;&lt;P&gt;I have this query by current day (figure 1)&lt;/P&gt;&lt;P&gt;index=xxxx sourcetype=xxx earliest=-d@d latest=now |table control indicador cumplimiento| sort control&lt;BR /&gt;|chart values(cumplimiento) over control by indicador&lt;/P&gt;&lt;P&gt;the fields are: Empleo, Huérfanas, Uso, Control _time and Month&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="figure1.png" style="width: 741px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/28241i4D3A4A4BEDE3BA4B/image-size/large?v=v2&amp;amp;px=999" role="button" title="figure1.png" alt="figure1.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;My problem is, I need also show data as showing in figure 2 (by month), but I don´t find the way to show as the figure (with month on top)&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="figure 2.png" style="width: 945px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/28240i70BDA2D426B38E33/image-size/large?v=v2&amp;amp;px=999" role="button" title="figure 2.png" alt="figure 2.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Somebody were a similar problem?&lt;/P&gt;</description>
      <pubDate>Fri, 24 Nov 2023 14:34:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Format-to-show-data/m-p/669653#M17917</guid>
      <dc:creator>Gabriel_CCI</dc:creator>
      <dc:date>2023-11-24T14:34:30Z</dc:date>
    </item>
    <item>
      <title>Re: Format to show data</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Format-to-show-data/m-p/669657#M17919</link>
      <description>&lt;P&gt;This is not possible with a single standard visualisation - you could have multiple panels with a different month in each panel.&lt;/P&gt;</description>
      <pubDate>Fri, 24 Nov 2023 14:45:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Format-to-show-data/m-p/669657#M17919</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2023-11-24T14:45:59Z</dc:date>
    </item>
    <item>
      <title>Re: Format to show data</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Format-to-show-data/m-p/669658#M17920</link>
      <description>&lt;P&gt;&amp;nbsp;Hi, Isn´t possible with join of chart?&lt;/P&gt;</description>
      <pubDate>Fri, 24 Nov 2023 14:49:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Format-to-show-data/m-p/669658#M17920</guid>
      <dc:creator>Gabriel_CCI</dc:creator>
      <dc:date>2023-11-24T14:49:22Z</dc:date>
    </item>
    <item>
      <title>Re: Format to show data</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Format-to-show-data/m-p/669660#M17921</link>
      <description>&lt;P&gt;No, the view you have is a table view and table views have unique column names, and do not have additional headers such as month as you have shown in your graphic.&lt;/P&gt;</description>
      <pubDate>Fri, 24 Nov 2023 14:52:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Format-to-show-data/m-p/669660#M17921</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2023-11-24T14:52:08Z</dc:date>
    </item>
  </channel>
</rss>

