https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597589#M208065 <P>Perhaps something like this?</P><LI-CODE lang="markup">| timechart span=5m distinct_count(source)</LI-CODE><P>&nbsp;</P> Thu, 12 May 2022 13:37:05 GMT richgalloway 2022-05-12T13:37:05Z https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597573#M208057 <P>Hi all,&nbsp;</P> <P>whenever I get a new log I wanted to count of the number of logs for the last 5 min and then append it to a graph. but I should be able to see graph of 1whole day</P> Thu, 12 May 2022 14:18:21 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597573#M208057 badrinath 2022-05-12T14:18:21Z https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597589#M208065 <P>Perhaps something like this?</P><LI-CODE lang="markup">| timechart span=5m distinct_count(source)</LI-CODE><P>&nbsp;</P> Thu, 12 May 2022 13:37:05 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597589#M208065 richgalloway 2022-05-12T13:37:05Z https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597596#M208067 <P>actually I need to do a real time search and append the results to a graph continuously.</P> Thu, 12 May 2022 13:59:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597596#M208067 badrinath 2022-05-12T13:59:36Z https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597641#M208086 <P>That's what should happen using the above.</P> Thu, 12 May 2022 16:36:50 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597641#M208086 richgalloway 2022-05-12T16:36:50Z https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597753#M208148 <P>that's correct&nbsp; but its creating something like buckets of 10min each like 2:00 to 2:10 and then counting in that time range.</P><P>but what I need is as soon as I get data lets say at 2:14 it should count the data from 2:04 to 2:14 and then append the count to graph.</P><P>when I get new data at 2:16 again it should count from 2:06 to 2:16 and append the count to graph again.</P> Fri, 13 May 2022 09:43:53 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-in-real-time-and-append-those-values-in-dashboard/m-p/597753#M208148 badrinath 2022-05-13T09:43:53Z