https://community.splunk.com/t5/Splunk-Search/Search-same-string-over-multiple-days-on-single-chart/m-p/92552#M23887 <P>well ultamitely i'd like to be able to chart each day over ontop of eachother, and also, i'd like to be able to get the top value for each host over the 7 day period.</P> Thu, 15 Mar 2012 14:25:21 GMT rdevine 2012-03-15T14:25:21Z https://community.splunk.com/t5/Splunk-Search/Search-same-string-over-multiple-days-on-single-chart/m-p/92550#M23885 <P>i'm trying to create a chart that has something like this</P> <P>computername - 7 days ago - 6 days ago - 5 days ago ... etc. for total kb used each day to do some stats on it. </P> <P>my search string is</P> <P>index="_internal" source="*metrics.log" per_host_thruput | chart sum(kb) by series useother=false to provide for a single day but i'm not sure how to overlay them all into one chart.</P> <P>any help would be awesome, thanks!</P> Mon, 28 Sep 2020 11:31:07 GMT https://community.splunk.com/t5/Splunk-Search/Search-same-string-over-multiple-days-on-single-chart/m-p/92550#M23885 rdevine 2020-09-28T11:31:07Z https://community.splunk.com/t5/Splunk-Search/Search-same-string-over-multiple-days-on-single-chart/m-p/92551#M23886 <P>Why not use timechart?</P> <PRE><CODE>index="_internal" source="*metrics.log" per_host_thruput | timechart useother=false span=1d sum(kb) by series </CODE></PRE> Wed, 14 Mar 2012 22:18:07 GMT https://community.splunk.com/t5/Splunk-Search/Search-same-string-over-multiple-days-on-single-chart/m-p/92551#M23886 lguinn2 2012-03-14T22:18:07Z https://community.splunk.com/t5/Splunk-Search/Search-same-string-over-multiple-days-on-single-chart/m-p/92552#M23887 <P>well ultamitely i'd like to be able to chart each day over ontop of eachother, and also, i'd like to be able to get the top value for each host over the 7 day period.</P> Thu, 15 Mar 2012 14:25:21 GMT https://community.splunk.com/t5/Splunk-Search/Search-same-string-over-multiple-days-on-single-chart/m-p/92552#M23887 rdevine 2012-03-15T14:25:21Z