<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Scatter plot of contingency data using earthquake data in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Scatter-plot-of-contingency-data-using-earthquake-data/m-p/99278#M5502</link>
    <description>&lt;P&gt;I solved this tricky problem with the following solution:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;source="eqs7mday-M2.5.txt"  | stats count(Depth) AS Depthcount by Magnitude,Depth | table Depthcount,Magnitude,Depth
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Hit the table button and select Scatter Plot and you end up with a Scatter Plot of Depth on the X axis and Magnitude on the Y axis with your count as values of the graph.&lt;/P&gt;</description>
    <pubDate>Mon, 16 Jul 2012 13:07:35 GMT</pubDate>
    <dc:creator>coleman07</dc:creator>
    <dc:date>2012-07-16T13:07:35Z</dc:date>
    <item>
      <title>Scatter plot of contingency data using earthquake data</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Scatter-plot-of-contingency-data-using-earthquake-data/m-p/99277#M5501</link>
      <description>&lt;P&gt;My ultimate goal is to create a scatter plot showing the number of email messages which has a spam score of X and phish score of Y. I tried to do this using the earthquake data and plotting the number of earthquakes which had Magnitude X and Depth Y where each colored dot would represent a different count. For example, red = 1, blue = 2 and Green =3 and the plot would show the count of each combination of depth and magnitude similar to the table produced by &lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;source="eqs7day-M2.5.txt" | contingency Depth Magnitude&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;If I read the chart reference page, the x axis is the first argument after chart, y axis is the over clause and the values would be the by clause. So, how do I get the following faulty chart command to work to produce what I want:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;`chart values(Magnitude) over Depth by count(Depth)` 
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;so the X axis is Magnitude, Y axis is Depth and the value is the number of earthquakes with that Magnitude and Depth?&lt;/P&gt;

&lt;P&gt;As you can see, this solution will give me the real answer to my real problem, graphing spam vs phish scores.&lt;/P&gt;

&lt;P&gt;Thanks so much,&lt;/P&gt;

&lt;P&gt;Sean Coleman&lt;/P&gt;</description>
      <pubDate>Sun, 15 Jul 2012 11:56:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Scatter-plot-of-contingency-data-using-earthquake-data/m-p/99277#M5501</guid>
      <dc:creator>coleman07</dc:creator>
      <dc:date>2012-07-15T11:56:46Z</dc:date>
    </item>
    <item>
      <title>Re: Scatter plot of contingency data using earthquake data</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Scatter-plot-of-contingency-data-using-earthquake-data/m-p/99278#M5502</link>
      <description>&lt;P&gt;I solved this tricky problem with the following solution:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;source="eqs7mday-M2.5.txt"  | stats count(Depth) AS Depthcount by Magnitude,Depth | table Depthcount,Magnitude,Depth
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Hit the table button and select Scatter Plot and you end up with a Scatter Plot of Depth on the X axis and Magnitude on the Y axis with your count as values of the graph.&lt;/P&gt;</description>
      <pubDate>Mon, 16 Jul 2012 13:07:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Scatter-plot-of-contingency-data-using-earthquake-data/m-p/99278#M5502</guid>
      <dc:creator>coleman07</dc:creator>
      <dc:date>2012-07-16T13:07:35Z</dc:date>
    </item>
  </channel>
</rss>

