https://community.splunk.com/t5/Splunk-Search/How-to-draw-a-line-chart-using-the-data-from-events/m-p/188730#M54379 <P>Hi,</P> <P>May I know how to use the data from events and draw a line chart in splunk or splunk can not do it?<BR /> My input data is simple like this:<BR /> type1, field1: 80, field2:100<BR /> type2, field1: 90, field2:100</P> <P>I want to draw a line chart that will show two output : 80/100 as rate1 from type1, 90/100 as rate2 from type2</P> <P>Thanks!</P> Thu, 14 May 2015 21:30:54 GMT sunfan1981 2015-05-14T21:30:54Z https://community.splunk.com/t5/Splunk-Search/How-to-draw-a-line-chart-using-the-data-from-events/m-p/188730#M54379 <P>Hi,</P> <P>May I know how to use the data from events and draw a line chart in splunk or splunk can not do it?<BR /> My input data is simple like this:<BR /> type1, field1: 80, field2:100<BR /> type2, field1: 90, field2:100</P> <P>I want to draw a line chart that will show two output : 80/100 as rate1 from type1, 90/100 as rate2 from type2</P> <P>Thanks!</P> Thu, 14 May 2015 21:30:54 GMT https://community.splunk.com/t5/Splunk-Search/How-to-draw-a-line-chart-using-the-data-from-events/m-p/188730#M54379 sunfan1981 2015-05-14T21:30:54Z https://community.splunk.com/t5/Splunk-Search/How-to-draw-a-line-chart-using-the-data-from-events/m-p/188731#M54380 <P>Try this:</P> <PRE><CODE>sourcetype=type1 OR sroucetype=type2 | rex "field1\s*:\s*(?&amp;lt;field1&amp;gt;\d+),\s+field2\s*:\s*(?&amp;lt;field2&amp;gt;\d+)" | eval rate=(field1/field2) | timechart rate by sourcetype </CODE></PRE> Thu, 14 May 2015 22:07:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-draw-a-line-chart-using-the-data-from-events/m-p/188731#M54380 woodcock 2015-05-14T22:07:23Z