https://community.splunk.com/t5/Splunk-Search/Create-table-and-chart-with-different-fields/m-p/68814#M17269 <P>Hello everyone, </P> <P>I'm using splunk for logfile analysis and what I'm trying to do is generating a report including chart and table, but with different fields displayed.<BR /> If I try this:</P> <PRE><CODE>... | table probability_of_portscan, number_of_connections, timespan, duration_in_seconds, src, dst, dst_ports | chart values(number_of_connections) OVER src BY probability_of_portscan </CODE></PRE> <P>I get the chart I want, but with its correlating table, not the table I defined.</P> <P>Each of the commands itself gives me what I want, but I can't figure out, how to get the table AND the chart I defined.<BR /> Any suggestions for combining the commands, apparently piping doesn't work? </P> Fri, 20 Sep 2013 09:30:51 GMT hRun 2013-09-20T09:30:51Z https://community.splunk.com/t5/Splunk-Search/Create-table-and-chart-with-different-fields/m-p/68814#M17269 <P>Hello everyone, </P> <P>I'm using splunk for logfile analysis and what I'm trying to do is generating a report including chart and table, but with different fields displayed.<BR /> If I try this:</P> <PRE><CODE>... | table probability_of_portscan, number_of_connections, timespan, duration_in_seconds, src, dst, dst_ports | chart values(number_of_connections) OVER src BY probability_of_portscan </CODE></PRE> <P>I get the chart I want, but with its correlating table, not the table I defined.</P> <P>Each of the commands itself gives me what I want, but I can't figure out, how to get the table AND the chart I defined.<BR /> Any suggestions for combining the commands, apparently piping doesn't work? </P> Fri, 20 Sep 2013 09:30:51 GMT https://community.splunk.com/t5/Splunk-Search/Create-table-and-chart-with-different-fields/m-p/68814#M17269 hRun 2013-09-20T09:30:51Z https://community.splunk.com/t5/Splunk-Search/Create-table-and-chart-with-different-fields/m-p/68815#M17270 <P>Hello</P> <P>I guess you should create a new dashboard with two panels inside, one for the table and other one for the chart, then you will get all the info in the same screen</P> <P>Regards</P> Fri, 20 Sep 2013 09:33:49 GMT https://community.splunk.com/t5/Splunk-Search/Create-table-and-chart-with-different-fields/m-p/68815#M17270 gfuente 2013-09-20T09:33:49Z