https://community.splunk.com/t5/Splunk-Search/How-to-create-trellis-timechart-with-stacked-bars/m-p/458897#M129584 <P>thank you for your respond, but it is a requirement to use trellis (to have a chart like this, splitted by LoginName). I think timechart is a good way, but perhaps I have to do some extra work before or after it</P> Thu, 11 Jul 2019 11:05:16 GMT tdoSplunk 2019-07-11T11:05:16Z https://community.splunk.com/t5/Splunk-Search/How-to-create-trellis-timechart-with-stacked-bars/m-p/458895#M129582 <P>Hi,</P> <P>I want to create a timechart as trellis with stacked bars.</P> <P>I have the following columns:<BR /> Workdate, Duration, BookingType, LoginName</P> <PRE><CODE>2019-06-03,5,1,User1 2019-06-03,2,2,User1 2019-06-03,1,3,User1 2019-06-03,3,1,User2 2019-06-03,3,2,User2 2019-06-03,2,3,User2 ... </CODE></PRE> <P>My Expectation is to see 2 Charts, one for User1 and one for User2 with a stacked bar for the Workdate 2019-06-01<BR /> The Total sum for each is 8, separated by the durations by BookingType<span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7293i70ABCE10A23C1036/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>My first approach was to use <CODE>|timechart sum(Duration) as Total by BookingType</CODE>, then I get nearly the result I want. But it is not possible to use Trellis (by LoginName). </P> <P>Do you have ideas on how to solve it?</P> <P>best regards<BR /> Thomas</P> Wed, 10 Jul 2019 14:37:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-trellis-timechart-with-stacked-bars/m-p/458895#M129582 tdoSplunk 2019-07-10T14:37:18Z https://community.splunk.com/t5/Splunk-Search/How-to-create-trellis-timechart-with-stacked-bars/m-p/458896#M129583 <P>chart sum(Duration) by BookingType, LoginName</P> <P>I wouldn't use Trellis because of how you want your chart stacked. </P> Wed, 10 Jul 2019 21:09:20 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-trellis-timechart-with-stacked-bars/m-p/458896#M129583 khristian_p 2019-07-10T21:09:20Z https://community.splunk.com/t5/Splunk-Search/How-to-create-trellis-timechart-with-stacked-bars/m-p/458897#M129584 <P>thank you for your respond, but it is a requirement to use trellis (to have a chart like this, splitted by LoginName). I think timechart is a good way, but perhaps I have to do some extra work before or after it</P> Thu, 11 Jul 2019 11:05:16 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-trellis-timechart-with-stacked-bars/m-p/458897#M129584 tdoSplunk 2019-07-11T11:05:16Z