<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to chart counts of events as Y axis, time as X axis and legend as field values? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-chart-counts-of-events-as-Y-axis-time-as-X-axis-and/m-p/525735#M88738</link>
    <description>&lt;P&gt;Great! This solved my issue and helped me further with my splunk searches! Thanks so much! Sorry for the late reply.&lt;/P&gt;</description>
    <pubDate>Wed, 21 Oct 2020 10:31:01 GMT</pubDate>
    <dc:creator>splunk_new1</dc:creator>
    <dc:date>2020-10-21T10:31:01Z</dc:date>
    <item>
      <title>How to chart counts of events as Y axis, time as X axis and legend as field values?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-chart-counts-of-events-as-Y-axis-time-as-X-axis-and/m-p/524488#M88541</link>
      <description>&lt;P&gt;Hi! I'm new to using splunk and I am currently trying to chart a series of events over a time period. I have managed to use the rex command and extracted out the values of interest to me.&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;Right now I would like to make it such that each individual "power" values are appearing as a line on its own with it's own legend, similar to how timechart would look like. How can I do that?&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2020-10-14 040743.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/11279iDE24EC5D9C76273E/image-size/medium?v=v2&amp;amp;px=400" role="button" title="Screenshot 2020-10-14 040743.png" alt="Screenshot 2020-10-14 040743.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2020-10-14 040332.png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/11278i88533B140FA59B47/image-size/large?v=v2&amp;amp;px=999" role="button" title="Screenshot 2020-10-14 040332.png" alt="Screenshot 2020-10-14 040332.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Also, I have another 5 events together in this index which are not the same format as the other logs in this index, is it possible for me to also use rex to extract them into another field and finally COMBINE both extracted REX fields into one big happy timechart/chart?&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="expected" style="width: 700px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/11280iA7CE860EF2662255/image-size/large?v=v2&amp;amp;px=999" role="button" title="700px-7.1.0_timechartProduct2-compressor" alt="expected" /&gt;&lt;span class="lia-inline-image-caption" onclick="event.preventDefault();"&gt;expected&lt;/span&gt;&lt;/span&gt;&lt;BR /&gt;something like this ^&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;I appreciate your time and thanks in advance for the help!&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 13 Oct 2020 20:12:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-chart-counts-of-events-as-Y-axis-time-as-X-axis-and/m-p/524488#M88541</guid>
      <dc:creator>splunk_new1</dc:creator>
      <dc:date>2020-10-13T20:12:28Z</dc:date>
    </item>
    <item>
      <title>Re: How to chart counts of events as Y axis, time as X axis and legend as field values?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-chart-counts-of-events-as-Y-axis-time-as-X-axis-and/m-p/524497#M88544</link>
      <description>&lt;LI-CODE lang="markup"&gt;| stats count by _time power&lt;/LI-CODE&gt;</description>
      <pubDate>Tue, 13 Oct 2020 21:27:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-chart-counts-of-events-as-Y-axis-time-as-X-axis-and/m-p/524497#M88544</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-10-13T21:27:28Z</dc:date>
    </item>
    <item>
      <title>Re: How to chart counts of events as Y axis, time as X axis and legend as field values?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-chart-counts-of-events-as-Y-axis-time-as-X-axis-and/m-p/525735#M88738</link>
      <description>&lt;P&gt;Great! This solved my issue and helped me further with my splunk searches! Thanks so much! Sorry for the late reply.&lt;/P&gt;</description>
      <pubDate>Wed, 21 Oct 2020 10:31:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-chart-counts-of-events-as-Y-axis-time-as-X-axis-and/m-p/525735#M88738</guid>
      <dc:creator>splunk_new1</dc:creator>
      <dc:date>2020-10-21T10:31:01Z</dc:date>
    </item>
  </channel>
</rss>

