<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: chart graph help in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531105#M150034</link>
    <description>&lt;P&gt;What are you trying to achieve? Why are you collecting the data? What insights do you hope to get from your charts/graphs? How does your data change over time? Answer some of these questions and it would easier to help you.&lt;/P&gt;</description>
    <pubDate>Fri, 27 Nov 2020 07:59:00 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2020-11-27T07:59:00Z</dc:date>
    <item>
      <title>chart graph help</title>
      <link>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531092#M150028</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I have data in a lookup file which i am appending everyday instead of indexing.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Time Device Infra Average Tool1 Tool2&lt;BR /&gt;11/26/2020 03:56 6223 95 88.41 95.69&lt;BR /&gt;11/27/2020 03:56 6220 94 88.39 95.74&lt;/P&gt;&lt;P&gt;And in the lookup file i have data in above format.&amp;nbsp;&lt;/P&gt;&lt;P&gt;What is the best way to show in a graph/chart the evolution of each field by Time&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Fri, 27 Nov 2020 03:35:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531092#M150028</guid>
      <dc:creator>surekhasplunk</dc:creator>
      <dc:date>2020-11-27T03:35:50Z</dc:date>
    </item>
    <item>
      <title>Re: chart graph help</title>
      <link>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531105#M150034</link>
      <description>&lt;P&gt;What are you trying to achieve? Why are you collecting the data? What insights do you hope to get from your charts/graphs? How does your data change over time? Answer some of these questions and it would easier to help you.&lt;/P&gt;</description>
      <pubDate>Fri, 27 Nov 2020 07:59:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531105#M150034</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-11-27T07:59:00Z</dc:date>
    </item>
    <item>
      <title>Re: chart graph help</title>
      <link>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531119#M150040</link>
      <description>&lt;P&gt;&lt;SPAN&gt;What are you trying to achieve?&amp;nbsp; to see the trend of the numbers changing each day&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Why are you collecting the data? to see the percentage of devices monitored in some of our tools. And work on the missing ones.&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;What insights do you hope to get from your charts/graphs? How does your data change over time?&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;every day/ every week once i am planning to append the csv file . from the chart/graph i need to show the change of numbers over time&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 27 Nov 2020 09:02:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531119#M150040</guid>
      <dc:creator>surekhasplunk</dc:creator>
      <dc:date>2020-11-27T09:02:20Z</dc:date>
    </item>
    <item>
      <title>Re: chart graph help</title>
      <link>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531139#M150048</link>
      <description>&lt;P&gt;Have you loaded the file (inputlookup)? Use fields to list the fields you are interested in starting with the time field so it becomes the x-axis, then select the line graph visualisation&lt;/P&gt;</description>
      <pubDate>Fri, 27 Nov 2020 11:55:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531139#M150048</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-11-27T11:55:49Z</dc:date>
    </item>
    <item>
      <title>Re: chart graph help</title>
      <link>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531148#M150054</link>
      <description>&lt;LI-CODE lang="markup"&gt;index=_internal | head 1 | fields _raw | eval _raw="Time Device Infra Average Tool1 Tool2
11/26/2020 03:56 6223 95 88.41 95.69
11/27/2020 03:56 6220 94 88.39 95.74"
| multikv 
| eval _time=strptime(Time." ".Device,"%m/%d/%Y %H:%M")
| table _time Infra Average Tool1 Tool2&lt;/LI-CODE&gt;&lt;P&gt;&amp;gt;What is the best way to show in a graph/chart the evolution of each field by Time&amp;nbsp;&lt;BR /&gt;The data doesn't explain anything about the meaning of.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 27 Nov 2020 13:08:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531148#M150054</guid>
      <dc:creator>to4kawa</dc:creator>
      <dc:date>2020-11-27T13:08:29Z</dc:date>
    </item>
    <item>
      <title>Re: chart graph help</title>
      <link>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531155#M150058</link>
      <description>&lt;P&gt;Yes i did load the lookup file.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Use fields to list the fields you are interested in starting with the time field so it becomes the x-axis, then select the line graph visualisation&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;(Here i wanted the query if can can help me with the exact query it will be helpful. )&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 27 Nov 2020 13:36:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531155#M150058</guid>
      <dc:creator>surekhasplunk</dc:creator>
      <dc:date>2020-11-27T13:36:58Z</dc:date>
    </item>
    <item>
      <title>Re: chart graph help</title>
      <link>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531158#M150059</link>
      <description>&lt;P&gt;What have you tried so far?&lt;/P&gt;</description>
      <pubDate>Fri, 27 Nov 2020 13:49:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/chart-graph-help/m-p/531158#M150059</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-11-27T13:49:03Z</dc:date>
    </item>
  </channel>
</rss>

