https://community.splunk.com/t5/Splunk-Search/Multi-Axis-timechart/m-p/90902#M23391 <P><CODE>index=logins | bin _time span=10m | stats count(eval(Login_Result="FAILED")) AS failed, count(eval(Login_Result)) AS total_logins by _time | eval failure_rate=round(((failed/total_logins)*100),2)</CODE></P> <P>This should give you some time-based data to graph with. A Column Chart might work. </P> Thu, 10 Oct 2013 11:28:35 GMT alacercogitatus 2013-10-10T11:28:35Z https://community.splunk.com/t5/Splunk-Search/Multi-Axis-timechart/m-p/90901#M23390 <P>I am wanting to timechart total logins, login failures, and failure rate on a mult-axis graph. So time across the bottom, with total logins/login failures stacked and shown on 1 y-axis, and the failure rate percentage on the other y-axis. I can calculate the 3 values with the following search ... just not sure how to do the timechart with multi-axis for the logins and percentage series.</P> <P>index=logins | stats count(eval(Login_Result="FAILED")) AS failed, count(eval(Login_Result)) AS total_logins | eval failure_rate=((failed/total_logins)*100) | eval failure_rate=round(failure_rate,2)</P> Mon, 28 Sep 2020 14:56:09 GMT https://community.splunk.com/t5/Splunk-Search/Multi-Axis-timechart/m-p/90901#M23390 schlapfer 2020-09-28T14:56:09Z https://community.splunk.com/t5/Splunk-Search/Multi-Axis-timechart/m-p/90902#M23391 <P><CODE>index=logins | bin _time span=10m | stats count(eval(Login_Result="FAILED")) AS failed, count(eval(Login_Result)) AS total_logins by _time | eval failure_rate=round(((failed/total_logins)*100),2)</CODE></P> <P>This should give you some time-based data to graph with. A Column Chart might work. </P> Thu, 10 Oct 2013 11:28:35 GMT https://community.splunk.com/t5/Splunk-Search/Multi-Axis-timechart/m-p/90902#M23391 alacercogitatus 2013-10-10T11:28:35Z