https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-timechart-for-specific-field-value-aggregations/m-p/588367#M48256 <P>Remove the "by block_descrip" from both timechart commands</P> Thu, 10 Mar 2022 09:08:08 GMT ITWhisperer 2022-03-10T09:08:08Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-timechart-for-specific-field-value-aggregations/m-p/588362#M48255 <P>Hi,</P> <P>I am unable to create a timechart for specific field value aggregations. I have one field with 4 possible values. One timechart needs to be the total number across all 4 values and the second timechart meeds to be the total over 2 field values. The only thing on the legend should be TOTAL from the timechart.<BR /><BR />Here is what my timechart and XML code currently looks like:<BR /><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Cannot add totals on timecharts.PNG" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/18413i56863375FE07F1F4/image-size/large?v=v2&amp;px=999" role="button" title="Cannot add totals on timecharts.PNG" alt="Cannot add totals on timecharts.PNG" /></span><BR />And<BR /><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Cannot add totals on timecharts - XML.PNG" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/18414iDFF311A5606B3136/image-size/large?v=v2&amp;px=999" role="button" title="Cannot add totals on timecharts - XML.PNG" alt="Cannot add totals on timecharts - XML.PNG" /></span><BR /><BR />Can you please help?<BR /><BR />Thanks,</P> <P>Patrick</P> Thu, 10 Mar 2022 15:51:01 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-timechart-for-specific-field-value-aggregations/m-p/588362#M48255 POR160893 2022-03-10T15:51:01Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-timechart-for-specific-field-value-aggregations/m-p/588367#M48256 <P>Remove the "by block_descrip" from both timechart commands</P> Thu, 10 Mar 2022 09:08:08 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-timechart-for-specific-field-value-aggregations/m-p/588367#M48256 ITWhisperer 2022-03-10T09:08:08Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-timechart-for-specific-field-value-aggregations/m-p/588370#M48257 <P>Perfect, worked like a charm.&nbsp;<span class="lia-unicode-emoji" title=":grinning_face_with_big_eyes:">😃</span><BR />Gave a Karma</P> Thu, 10 Mar 2022 09:37:06 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-timechart-for-specific-field-value-aggregations/m-p/588370#M48257 POR160893 2022-03-10T09:37:06Z