https://community.splunk.com/t5/Splunk-Search/How-to-represent-data-in-piechart-Linechart-which-I-received-by/m-p/201653#M58426 <P>Try something like this</P> <PRE><CODE>your current search generating MLS_Number Count as shown in ques | stats count(MLS_Number) as MLSNumber by Count </CODE></PRE> Mon, 31 Aug 2015 15:26:45 GMT somesoni2 2015-08-31T15:26:45Z https://community.splunk.com/t5/Splunk-Search/How-to-represent-data-in-piechart-Linechart-which-I-received-by/m-p/201652#M58425 <P>My data after search has following columns along with the other columns as below</P> <P>MLS_Number Count<BR /> 1129078 1<BR /> 1248955 1<BR /> 1290591 2<BR /> 1379041 1<BR /> 2035500 3<BR /> 2146693 1<BR /> 2177466 4<BR /> 2208748 1<BR /> 2362548 1<BR /> 3040705 1<BR /> 3047234 3<BR /> 4638653 2</P> <P>so, on Y-axis it will show Count as 1, 2, 3 and 4<BR /> on X- axis I want count of MLS_Number, with respect to Count 1, 2,3,4</P> <P>eg. here there are 7 records for the count = 1<BR /> similarly 2 records for Count = 2 in a such way .. i want to display the data.<BR /> Please help me with this.. <BR /> Thanks Buddy...!! </P> Mon, 31 Aug 2015 12:28:44 GMT https://community.splunk.com/t5/Splunk-Search/How-to-represent-data-in-piechart-Linechart-which-I-received-by/m-p/201652#M58425 rupesh_patil20 2015-08-31T12:28:44Z https://community.splunk.com/t5/Splunk-Search/How-to-represent-data-in-piechart-Linechart-which-I-received-by/m-p/201653#M58426 <P>Try something like this</P> <PRE><CODE>your current search generating MLS_Number Count as shown in ques | stats count(MLS_Number) as MLSNumber by Count </CODE></PRE> Mon, 31 Aug 2015 15:26:45 GMT https://community.splunk.com/t5/Splunk-Search/How-to-represent-data-in-piechart-Linechart-which-I-received-by/m-p/201653#M58426 somesoni2 2015-08-31T15:26:45Z https://community.splunk.com/t5/Splunk-Search/How-to-represent-data-in-piechart-Linechart-which-I-received-by/m-p/201654#M58427 <P>Hi Somesoni2,</P> <P>I tried your query and I got the result but the problem arose now is it is giving me repetitive count, for example here there are 7 records for the count = 1, but in the result the count shown as 98550. As I am using REST API for input.. so may be it updates the data continuously.<BR /> Can you help me with time stamp, like how I can add it in search to get the exact data.</P> Tue, 01 Sep 2015 05:32:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-represent-data-in-piechart-Linechart-which-I-received-by/m-p/201654#M58427 rupesh_patil20 2015-09-01T05:32:36Z