https://community.splunk.com/t5/Splunk-Search/How-do-I-get-my-SPLUNK-csv-excel-data-to-display-via-a/m-p/222169#M188195 <P>For your bar chart, you can use commands like these</P> <PRE><CODE>your base search | stats sum("SUM_VALUE_") as SUM_VALUE by CDC_DVN_VERSION_ </CODE></PRE> <P>OR </P> <PRE><CODE>your base search | chart sum("SUM_VALUE_") as SUM_VALUE by CDC_DVN_VERSION_ </CODE></PRE> <P>To add PRODUCT_ID_, as filter, create a form input with token productid and use the token as filter in your base search</P> <PRE><CODE>your base search PRODUCT_ID_="$productid$" | chart sum("SUM_VALUE_") as SUM_VALUE by CDC_DVN_VERSION_ </CODE></PRE> <P>See this for examples for how to create form/form input.<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Buildandeditforms" target="_blank">http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Buildandeditforms</A></P> Tue, 29 Sep 2020 10:34:56 GMT somesoni2 2020-09-29T10:34:56Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-my-SPLUNK-csv-excel-data-to-display-via-a/m-p/222167#M188193 <P>My data displays in splunk and ![I was able to generate a correct table via running the command index=cmadam host=kot source= "/media/sf_aaa/log1.csv" | multikv | table PRODUCT_ID_, CDC_DVN_VERSION_, SUM_VALUE_ which covers all my needed variables at the moment. My goal is a table similar to this<IMG src="https://community.splunk.com/storage/temp/153246-acs.png" alt="alt text" /><BR /> When I press visualization I create a graph where the axis are correctly labeled, but no bars show up. What commands are best for creating this visualizations. I'd like the x to be CDC_DVN_VERSION_ and the y to be SUM_VALUE_ which can be filtered by a changing PRODUCT_ID_ later to be defined. Thanks.</P> Tue, 29 Sep 2020 10:34:47 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-my-SPLUNK-csv-excel-data-to-display-via-a/m-p/222167#M188193 vstrash 2020-09-29T10:34:47Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-my-SPLUNK-csv-excel-data-to-display-via-a/m-p/222168#M188194 <P>The above chart is what I hope to mimic or create similar to.</P> Wed, 10 Aug 2016 19:31:54 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-my-SPLUNK-csv-excel-data-to-display-via-a/m-p/222168#M188194 vstrash 2016-08-10T19:31:54Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-my-SPLUNK-csv-excel-data-to-display-via-a/m-p/222169#M188195 <P>For your bar chart, you can use commands like these</P> <PRE><CODE>your base search | stats sum("SUM_VALUE_") as SUM_VALUE by CDC_DVN_VERSION_ </CODE></PRE> <P>OR </P> <PRE><CODE>your base search | chart sum("SUM_VALUE_") as SUM_VALUE by CDC_DVN_VERSION_ </CODE></PRE> <P>To add PRODUCT_ID_, as filter, create a form input with token productid and use the token as filter in your base search</P> <PRE><CODE>your base search PRODUCT_ID_="$productid$" | chart sum("SUM_VALUE_") as SUM_VALUE by CDC_DVN_VERSION_ </CODE></PRE> <P>See this for examples for how to create form/form input.<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Buildandeditforms" target="_blank">http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Buildandeditforms</A></P> Tue, 29 Sep 2020 10:34:56 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-my-SPLUNK-csv-excel-data-to-display-via-a/m-p/222169#M188195 somesoni2 2020-09-29T10:34:56Z