<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: chart in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/chart/m-p/659964#M227835</link>
    <description>&lt;P&gt;It is not possible with standard column charts. You either have stacked column or separate columns, not a mixture.&lt;/P&gt;</description>
    <pubDate>Fri, 06 Oct 2023 10:45:02 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2023-10-06T10:45:02Z</dc:date>
    <item>
      <title>chart</title>
      <link>https://community.splunk.com/t5/Splunk-Search/chart/m-p/659959#M227833</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;I have total four fields lets say a,b,c and d. i want to show 'a' as a separate column and 'b','c' and 'd' as stacked and beside 'a' along with the sum of fields ('b'+'c'+'d') so that the count of these fields would come on the top of their column so that we can easily compare field 'a' with the count of rest.&lt;BR /&gt;Note:- I don't want separate column which would give sum of these three field.&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;Click visualization select column chart&lt;BR /&gt;Click format and enable the stack mode.&lt;BR /&gt;select show data values as on&lt;BR /&gt;Click chart overlay and Click the text box and select Total field.&lt;BR /&gt;makeView as Axis as off&lt;BR /&gt;Click Apply.&lt;/P&gt;&lt;P&gt;After the above steps that i had mentioned, I can see the total on the top along with the line,&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="smanojkumar_0-1696587767375.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/27485iF0BF556EC6FED6F6/image-size/medium?v=v2&amp;amp;px=400" role="button" title="smanojkumar_0-1696587767375.png" alt="smanojkumar_0-1696587767375.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I don't need line, Can you please help me in this.&lt;/P&gt;&lt;P&gt;Thanks in Advance!&lt;/P&gt;&lt;P&gt;Manoj Kumar S&lt;/P&gt;</description>
      <pubDate>Fri, 06 Oct 2023 10:23:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/chart/m-p/659959#M227833</guid>
      <dc:creator>smanojkumar</dc:creator>
      <dc:date>2023-10-06T10:23:36Z</dc:date>
    </item>
    <item>
      <title>Re: chart</title>
      <link>https://community.splunk.com/t5/Splunk-Search/chart/m-p/659964#M227835</link>
      <description>&lt;P&gt;It is not possible with standard column charts. You either have stacked column or separate columns, not a mixture.&lt;/P&gt;</description>
      <pubDate>Fri, 06 Oct 2023 10:45:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/chart/m-p/659964#M227835</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2023-10-06T10:45:02Z</dc:date>
    </item>
  </channel>
</rss>

