https://community.splunk.com/t5/Splunk-Enterprise/help-on-append-command-in-a-line-chart/m-p/676700#M18608 <P>hello</P><P>I need to display 2 curves in my line chart from two different index</P><P>so i am doing this :</P><LI-CODE lang="markup">index="disk" sourcetype="Perfmon:disk" | bin span=10m _time | eval time=strftime(_time, "%H:%M:%S") | stats avg(Value) as Disque by time | eval Disque=round(Disque, 2) | append [ search index="mem" sourcetype="Perfmon:mem" | bin span=10m _time | eval time=strftime(_time, "%H:%M:%S") | stats avg(Value) as Mémoire by time | eval Mémoire=round(Mémoire, 2)]</LI-CODE><P>the problem I have is that on the x axis my curves are not aligned on the same time slot</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jip31_0-1707207151990.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/29260i8744AE37B5502BF6/image-size/large?v=v2&amp;px=999" role="button" title="jip31_0-1707207151990.png" alt="jip31_0-1707207151990.png" /></span></P><P>what is wrong please?</P><P>thanks</P> Tue, 06 Feb 2024 08:13:38 GMT jip31 2024-02-06T08:13:38Z https://community.splunk.com/t5/Splunk-Enterprise/help-on-append-command-in-a-line-chart/m-p/676700#M18608 <P>hello</P><P>I need to display 2 curves in my line chart from two different index</P><P>so i am doing this :</P><LI-CODE lang="markup">index="disk" sourcetype="Perfmon:disk" | bin span=10m _time | eval time=strftime(_time, "%H:%M:%S") | stats avg(Value) as Disque by time | eval Disque=round(Disque, 2) | append [ search index="mem" sourcetype="Perfmon:mem" | bin span=10m _time | eval time=strftime(_time, "%H:%M:%S") | stats avg(Value) as Mémoire by time | eval Mémoire=round(Mémoire, 2)]</LI-CODE><P>the problem I have is that on the x axis my curves are not aligned on the same time slot</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jip31_0-1707207151990.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/29260i8744AE37B5502BF6/image-size/large?v=v2&amp;px=999" role="button" title="jip31_0-1707207151990.png" alt="jip31_0-1707207151990.png" /></span></P><P>what is wrong please?</P><P>thanks</P> Tue, 06 Feb 2024 08:13:38 GMT https://community.splunk.com/t5/Splunk-Enterprise/help-on-append-command-in-a-line-chart/m-p/676700#M18608 jip31 2024-02-06T08:13:38Z https://community.splunk.com/t5/Splunk-Enterprise/help-on-append-command-in-a-line-chart/m-p/676710#M18609 <P>You need to get&nbsp; your stats into the same events. Try something like this</P><LI-CODE lang="markup">index="disk" sourcetype="Perfmon:disk" | bin span=10m _time | eval time=strftime(_time, "%H:%M:%S") | rename Value as Disque | append [ search index="mem" sourcetype="Perfmon:mem" | bin span=10m _time | eval time=strftime(_time, "%H:%M:%S") | rename Value as Mémoire] | stats avg(Disque) as Disque avg(Mémoire) as Mémoire by time | eval Disque=round(Disque, 2) | eval Mémoire=round(Mémoire, 2)</LI-CODE> Tue, 06 Feb 2024 09:20:55 GMT https://community.splunk.com/t5/Splunk-Enterprise/help-on-append-command-in-a-line-chart/m-p/676710#M18609 ITWhisperer 2024-02-06T09:20:55Z https://community.splunk.com/t5/Splunk-Enterprise/help-on-append-command-in-a-line-chart/m-p/676734#M18612 <P>thanks</P> Tue, 06 Feb 2024 13:04:51 GMT https://community.splunk.com/t5/Splunk-Enterprise/help-on-append-command-in-a-line-chart/m-p/676734#M18612 jip31 2024-02-06T13:04:51Z