https://community.splunk.com/t5/Splunk-Search/How-to-modify-my-search-to-get-result-shown-in-a-visualization/m-p/216992#M63719 <P>Please try..capital over and by.</P> <P>index=level3 host=Test | chart count OVER "Opened" BY "Assignment group"</P> <P>your mail id is not available on your profile .. </P> Thu, 29 Sep 2016 14:06:15 GMT inventsekar 2016-09-29T14:06:15Z https://community.splunk.com/t5/Splunk-Search/How-to-modify-my-search-to-get-result-shown-in-a-visualization/m-p/216991#M63718 <P>Am using this search </P> <PRE><CODE>index=level3 host=Test | chart count over "Opened" by "Assignment group" </CODE></PRE> <P>I am getting the desired result in statistics but not in visualization. <BR /> Please help. <BR /> Am not able to post any pictures so pls mail me i will reply back. </P> Thu, 29 Sep 2016 10:38:54 GMT https://community.splunk.com/t5/Splunk-Search/How-to-modify-my-search-to-get-result-shown-in-a-visualization/m-p/216991#M63718 surekhasplunk 2016-09-29T10:38:54Z https://community.splunk.com/t5/Splunk-Search/How-to-modify-my-search-to-get-result-shown-in-a-visualization/m-p/216992#M63719 <P>Please try..capital over and by.</P> <P>index=level3 host=Test | chart count OVER "Opened" BY "Assignment group"</P> <P>your mail id is not available on your profile .. </P> Thu, 29 Sep 2016 14:06:15 GMT https://community.splunk.com/t5/Splunk-Search/How-to-modify-my-search-to-get-result-shown-in-a-visualization/m-p/216992#M63719 inventsekar 2016-09-29T14:06:15Z https://community.splunk.com/t5/Splunk-Search/How-to-modify-my-search-to-get-result-shown-in-a-visualization/m-p/216993#M63720 <P>Which visualization are you using? Have you set it to one of the chart types (bar, line, area) or a format that is compatible with the data?</P> Thu, 29 Sep 2016 14:54:21 GMT https://community.splunk.com/t5/Splunk-Search/How-to-modify-my-search-to-get-result-shown-in-a-visualization/m-p/216993#M63720 sundareshr 2016-09-29T14:54:21Z