Hi,
May i know what is the correct SPL language to show scatter plot chart with time as x-axis and number on y-axis?
Actually I read in here that this feature is currently not supported and listed in enhancement request.
https://community.splunk.com/t5/Splunk-Search/How-to-present-the-date-and-value-not-in-epoch-format-...
I tried to query:
.. search
| table _time value
However the result shows the time in scatterplot on x-axis is a number 0,5,10..
and there's only 1 point in zero value.
May I know if the enhancement request is ready ? or is there any workaround for this problem?
Thanks.
index=_internal
| timechart count by sourcetype
choose visualization as you like.