https://community.splunk.com/t5/Splunk-Search/chart-by-2-fields/m-p/541735#M153383 <P>Hi,</P><P>is there a possibility to create a chart by these two fields? If possible I would like to create a heatmap out of this chart.</P><LI-CODE lang="markup">| eval error= if(count&gt;50, 1, 0) | chart sum(error) by cpwd_nr | chart sum(error) by host</LI-CODE><P>&nbsp;</P> Mon, 01 Mar 2021 11:24:59 GMT schufi01 2021-03-01T11:24:59Z https://community.splunk.com/t5/Splunk-Search/chart-by-2-fields/m-p/541735#M153383 <P>Hi,</P><P>is there a possibility to create a chart by these two fields? If possible I would like to create a heatmap out of this chart.</P><LI-CODE lang="markup">| eval error= if(count&gt;50, 1, 0) | chart sum(error) by cpwd_nr | chart sum(error) by host</LI-CODE><P>&nbsp;</P> Mon, 01 Mar 2021 11:24:59 GMT https://community.splunk.com/t5/Splunk-Search/chart-by-2-fields/m-p/541735#M153383 schufi01 2021-03-01T11:24:59Z https://community.splunk.com/t5/Splunk-Search/chart-by-2-fields/m-p/541846#M153443 <P>you could use |stats instead of |chart.</P><P>&nbsp;</P><LI-CODE lang="markup">| eval error= if(count&gt;50, 1, 0) | stats sum(error) by cpwd_nr, host</LI-CODE> Mon, 01 Mar 2021 20:02:06 GMT https://community.splunk.com/t5/Splunk-Search/chart-by-2-fields/m-p/541846#M153443 jodonald 2021-03-01T20:02:06Z