https://community.splunk.com/t5/Reporting/TimeChart-report-with-accrued-event-count/m-p/149491#M3322 <P>How can I build a report to show the total count of a specific event over time. All of my timecharts are showing spikes over the time range but not accruing the number throughout. </P> Thu, 01 May 2014 22:50:03 GMT shorgan 2014-05-01T22:50:03Z https://community.splunk.com/t5/Reporting/TimeChart-report-with-accrued-event-count/m-p/149491#M3322 <P>How can I build a report to show the total count of a specific event over time. All of my timecharts are showing spikes over the time range but not accruing the number throughout. </P> Thu, 01 May 2014 22:50:03 GMT https://community.splunk.com/t5/Reporting/TimeChart-report-with-accrued-event-count/m-p/149491#M3322 shorgan 2014-05-01T22:50:03Z https://community.splunk.com/t5/Reporting/TimeChart-report-with-accrued-event-count/m-p/149492#M3323 <P>I am not sure what you mean by "accruing the number throughout". It would be helpful to see your actual search.</P> <P>If you want a timechart that counts events, you can do this</P> <PRE><CODE>yoursearchhere | timechart count </CODE></PRE> <P>If you want to specify the time interval you can do this</P> <PRE><CODE>yoursearchhere | timechart count span=1h </CODE></PRE> <P>If you want to see the count as an ever-increasing number, I guess you could do this</P> <PRE><CODE>yoursearchhere | timechart count as hourlyCount span=1h | streamstats sum(hourlyCount) as count </CODE></PRE> Fri, 02 May 2014 08:15:46 GMT https://community.splunk.com/t5/Reporting/TimeChart-report-with-accrued-event-count/m-p/149492#M3323 lguinn2 2014-05-02T08:15:46Z