topic Re: Need help in creating graphs for a value extracted from log in Splunk Search

Need help in creating graphs for a value extracted from log

Devi13 — Fri, 01 Sep 2023 08:21:33 GMT

Hello Team,

I have log like this,

File Records count is 2

File Records count is 5

File Records count is 45

File Records count is 23

and I have extracted the values 2,5,45,23 as a separate field called Count.

When I use "base search| table Count" I am getting the expected value in a stats table

But I want 2,5,45,23 to be plotted in the line graph.

I tried stats commands but its only showing the no. of events of Count but not the values of count.

Could you please provide your assistance on how can I plot the values of Count into a graph.

gcusello — Fri, 01 Sep 2023 08:28:26 GMT

base search | eval Count=tonumber(Count) | table Count

Ciao.

Giuseppe

ITWhisperer — Fri, 01 Sep 2023 09:04:52 GMT

Have you tried creating a dashboard and adding a panel of the chart type you want, then using your search as the data source?

Devi13 — Fri, 01 Sep 2023 10:15:05 GMT

Hello @gcusello , Thank you that worked.

Hello @ITWhisperer , yeahh now we are getting the results as expected.

Thank you for your help.