https://community.splunk.com/t5/Dashboards-Visualizations/Create-single-stacked-time-chart-for-different-fields-for/m-p/387852#M41422 <P>Is there a way to put them both the bars on a single scale?</P> Thu, 21 Jun 2018 08:28:33 GMT pranaynanda 2018-06-21T08:28:33Z https://community.splunk.com/t5/Dashboards-Visualizations/Create-single-stacked-time-chart-for-different-fields-for/m-p/387851#M41421 <P><span class="lia-inline-image-display-wrapper" image-alt="Trellis"><img src="https://community.splunk.com/t5/image/serverpage/image-id/5208i6F99532922F8E656/image-size/large?v=v2&amp;px=999" role="button" title="Trellis" alt="Trellis" /></span></P> <P>Hello! I want to create something like this but I want to put them on the same chart and not use the trellis view. My query goes like this:</P> <PRE><CODE>index="tcpr-dispatcher" host=* sourcetype=DispatcherLogs FinalState=TERMINAL OR FinalState=COMPLETE |where Module in ("nxtransdirect","proetojt","sep_cid_coversheet") OR (Module in ("previewservice") AND isnotnull(extension)) |timechart count(eval(FinalState="TERMINAL")) as TERMINAL, count(eval(FinalState="COMPLETE")) as COMPLETE span=1month by host </CODE></PRE> <P>Please help.</P> Tue, 19 Jun 2018 11:29:32 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Create-single-stacked-time-chart-for-different-fields-for/m-p/387851#M41421 pranaynanda 2018-06-19T11:29:32Z https://community.splunk.com/t5/Dashboards-Visualizations/Create-single-stacked-time-chart-for-different-fields-for/m-p/387852#M41422 <P>Is there a way to put them both the bars on a single scale?</P> Thu, 21 Jun 2018 08:28:33 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Create-single-stacked-time-chart-for-different-fields-for/m-p/387852#M41422 pranaynanda 2018-06-21T08:28:33Z