topic want to combine time chart and table in Dashboards & Visualizations https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336152#M43017 <P>I want to use timechart as instead of sparkline.</P> <H2>It is the current search sentence.</H2> <P>index=test | table A B C D | join A [ search index=test |</P> <H2> chart sparkline(max(B)) by A ] | makemv delim="," setsv=true sparkline(max(A))</H2> <P>Do you have any suggestions?</P> <P>Thanks.<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/2793iB1AEBA57C46196AF/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Mon, 17 Apr 2017 03:04:00 GMT oda 2017-04-17T03:04:00Z want to combine time chart and table https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336152#M43017 <P>I want to use timechart as instead of sparkline.</P> <H2>It is the current search sentence.</H2> <P>index=test | table A B C D | join A [ search index=test |</P> <H2> chart sparkline(max(B)) by A ] | makemv delim="," setsv=true sparkline(max(A))</H2> <P>Do you have any suggestions?</P> <P>Thanks.<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/2793iB1AEBA57C46196AF/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Mon, 17 Apr 2017 03:04:00 GMT https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336152#M43017 oda 2017-04-17T03:04:00Z Re: want to combine time chart and table https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336153#M43018 <P>Do you want help with post Processing to run single base search for table and timechart? While displaying can you display timechart on click of a particular table row? If yes please check out <STRONG>Table Row Expansion (More Details)</STRONG> and <STRONG>In-Page Drilldown with Perma-linking examples</STRONG> in <STRONG>Splunk 6.x Dashboard Examples app</STRONG> </P> Mon, 17 Apr 2017 07:06:24 GMT https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336153#M43018 niketn 2017-04-17T07:06:24Z Re: want to combine time chart and table https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336154#M43019 <P>Add _time to your table.</P> Mon, 17 Apr 2017 11:37:24 GMT https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336154#M43019 jkat54 2017-04-17T11:37:24Z Re: want to combine time chart and table https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336155#M43020 <P>Thank you. I am glad your reply.However, I made that setting.It can display only one graph.I would like to have a way like tableau.Best regards.</P> Tue, 18 Apr 2017 00:47:09 GMT https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336155#M43020 oda 2017-04-18T00:47:09Z Re: want to combine time chart and table https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336156#M43021 <P>Thank you for answering. But,I would like to have a way like tableau.</P> Tue, 18 Apr 2017 00:48:40 GMT https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336156#M43021 oda 2017-04-18T00:48:40Z Re: want to combine time chart and table https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336157#M43022 <P>Can you share a link or a screenshot of what you mean?</P> Tue, 18 Apr 2017 05:23:34 GMT https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336157#M43022 jkat54 2017-04-18T05:23:34Z Re: want to combine time chart and table https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336158#M43023 <P>Thank you for contacting.<BR /> Could you check it because I added a screenshot?</P> Tue, 18 Apr 2017 08:41:49 GMT https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336158#M43023 oda 2017-04-18T08:41:49Z Re: want to combine time chart and table https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336159#M43024 <PRE><CODE>Try this index=test |timechart max(A) max(B) max(C) max(D) </CODE></PRE> Tue, 18 Apr 2017 11:20:15 GMT https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336159#M43024 jkat54 2017-04-18T11:20:15Z Re: want to combine time chart and table https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336160#M43025 <P>I appreciate your suggestion.<BR /> It is displayed in one figure, it is easy to see, but this time I want to display it separately.</P> <H1>For example, every host.</H1> Wed, 19 Apr 2017 01:17:42 GMT https://community.splunk.com/t5/Dashboards-Visualizations/want-to-combine-time-chart-and-table/m-p/336160#M43025 oda 2017-04-19T01:17:42Z