https://community.splunk.com/t5/Splunk-Search/How-to-Create-a-Stacked-Chart-with-3-data-points/m-p/152879#M42849 <P>This seems similar to <A href="http://answers.splunk.com/answers/108423/stacked-chart-to-show-how-many-calls-where-assigned-to-the-assignee-by-the-queuemanagers.html">http://answers.splunk.com/answers/108423/stacked-chart-to-show-how-many-calls-where-assigned-to-the-assignee-by-the-queuemanagers.html</A>, but I can't seem to apply it in practice.</P> <P>I have 3 values:<BR /> stats sum (Requests)<BR /> hourOfRequest (date_hour essentially)<BR /> host</P> <P>I want to see a stacked chart, where each column is a host, and the sum(request) per hourOfRequest are the series within each column. I've tried a few different methods, but can't seem to get it.</P> Wed, 17 Dec 2014 23:06:27 GMT kknopp 2014-12-17T23:06:27Z https://community.splunk.com/t5/Splunk-Search/How-to-Create-a-Stacked-Chart-with-3-data-points/m-p/152879#M42849 <P>This seems similar to <A href="http://answers.splunk.com/answers/108423/stacked-chart-to-show-how-many-calls-where-assigned-to-the-assignee-by-the-queuemanagers.html">http://answers.splunk.com/answers/108423/stacked-chart-to-show-how-many-calls-where-assigned-to-the-assignee-by-the-queuemanagers.html</A>, but I can't seem to apply it in practice.</P> <P>I have 3 values:<BR /> stats sum (Requests)<BR /> hourOfRequest (date_hour essentially)<BR /> host</P> <P>I want to see a stacked chart, where each column is a host, and the sum(request) per hourOfRequest are the series within each column. I've tried a few different methods, but can't seem to get it.</P> Wed, 17 Dec 2014 23:06:27 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Create-a-Stacked-Chart-with-3-data-points/m-p/152879#M42849 kknopp 2014-12-17T23:06:27Z https://community.splunk.com/t5/Splunk-Search/How-to-Create-a-Stacked-Chart-with-3-data-points/m-p/152880#M42850 <P>Got it! Now that I understand chart commands better. Take out stats, just use charts and:</P> <P>chart sum(requests) over host by hourOfRequest</P> Wed, 17 Dec 2014 23:11:19 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Create-a-Stacked-Chart-with-3-data-points/m-p/152880#M42850 kknopp 2014-12-17T23:11:19Z