https://community.splunk.com/t5/Splunk-Search/Timechart-how-to-display-value-of-field-without-function/m-p/622267#M216303 <LI-CODE lang="markup">index="redis" sourcetype="csv" total_commands_processed="*" | timechart span=5m total_commands_processed</LI-CODE> <P>In the search command above, I want to display value of field "total_commands_processed", anyone can help</P> Mon, 28 Nov 2022 12:11:05 GMT Chaser 2022-11-28T12:11:05Z https://community.splunk.com/t5/Splunk-Search/Timechart-how-to-display-value-of-field-without-function/m-p/622267#M216303 <LI-CODE lang="markup">index="redis" sourcetype="csv" total_commands_processed="*" | timechart span=5m total_commands_processed</LI-CODE> <P>In the search command above, I want to display value of field "total_commands_processed", anyone can help</P> Mon, 28 Nov 2022 12:11:05 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-how-to-display-value-of-field-without-function/m-p/622267#M216303 Chaser 2022-11-28T12:11:05Z https://community.splunk.com/t5/Splunk-Search/Timechart-how-to-display-value-of-field-without-function/m-p/622268#M216304 <P>Try something like this</P><LI-CODE lang="markup">index="redis" sourcetype="csv" total_commands_processed="*" | timechart span=5m max(total_commands_processed) as total_commands_processed</LI-CODE> Mon, 28 Nov 2022 12:08:36 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-how-to-display-value-of-field-without-function/m-p/622268#M216304 ITWhisperer 2022-11-28T12:08:36Z https://community.splunk.com/t5/Splunk-Search/Timechart-how-to-display-value-of-field-without-function/m-p/622269#M216305 <P>Thank you so much, it helped me&nbsp;</P> Mon, 28 Nov 2022 12:44:30 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-how-to-display-value-of-field-without-function/m-p/622269#M216305 Chaser 2022-11-28T12:44:30Z