https://community.splunk.com/t5/Splunk-Search/stats-timechart-after-timechart/m-p/491534#M137208 <P>@reverse ,</P> <P>Try</P> <PRE><CODE> "your search"|untable _time,Host,AV |stats max(AV) BY Host </CODE></PRE> Tue, 01 Oct 2019 04:40:12 GMT renjith_nair 2019-10-01T04:40:12Z https://community.splunk.com/t5/Splunk-Search/stats-timechart-after-timechart/m-p/491533#M137207 <PRE><CODE>| timechart span=10m avg(Value) as AV by Host useother=false </CODE></PRE> <P>after running this query - I get desired values for all HOSTS..<BR /> Now I want to get MAX of each column for the day .. </P> <P>Stats wouldn't show anything ..</P> <PRE><CODE>| stats max(AV) BY Host </CODE></PRE> Tue, 01 Oct 2019 02:51:42 GMT https://community.splunk.com/t5/Splunk-Search/stats-timechart-after-timechart/m-p/491533#M137207 reverse 2019-10-01T02:51:42Z https://community.splunk.com/t5/Splunk-Search/stats-timechart-after-timechart/m-p/491534#M137208 <P>@reverse ,</P> <P>Try</P> <PRE><CODE> "your search"|untable _time,Host,AV |stats max(AV) BY Host </CODE></PRE> Tue, 01 Oct 2019 04:40:12 GMT https://community.splunk.com/t5/Splunk-Search/stats-timechart-after-timechart/m-p/491534#M137208 renjith_nair 2019-10-01T04:40:12Z https://community.splunk.com/t5/Splunk-Search/stats-timechart-after-timechart/m-p/491535#M137209 <P>Agree with Renjith's comments. But if you need to capture the time of the max event as well, then try this.</P> <PRE><CODE>"your search" |untable _time Host AV |eventstats max(AV) as max_AV by Host | where AV=max_AV | table _time Host AV </CODE></PRE> Tue, 01 Oct 2019 05:19:16 GMT https://community.splunk.com/t5/Splunk-Search/stats-timechart-after-timechart/m-p/491535#M137209 nareshinsvu 2019-10-01T05:19:16Z https://community.splunk.com/t5/Splunk-Search/stats-timechart-after-timechart/m-p/491536#M137210 <P>Amazing .. cleared all the clutter too ..<BR /> thank you for such a clean solution</P> Tue, 01 Oct 2019 05:52:40 GMT https://community.splunk.com/t5/Splunk-Search/stats-timechart-after-timechart/m-p/491536#M137210 reverse 2019-10-01T05:52:40Z