I met a trouble that I want to make the follow chart with splunk, but failed.
For example, I have 3 fields to make a column chart, but I want 2 fields on one column as follow picture.
Who can help me?
Hi zhimeng_yu1506,
No You have to choose between all stacked or all separated columns, you cannot have two columns stacked and one separated.
Bu t you could to stack your columns in one and put the third (test) as overlay, in this way it's graphically separated by the others.
Using web Gui: [Modify -- Modify panels -- Overlay] choose the field for Overlay.
or by source <option name="charting.chart.overlayFields">average</option>
Bye.
Giuseppe
I use this way to make the line graph, not column. I want to use column cover the old one. Can this be achieved?
No This is the only way to have a separate graphic representation of your data.
Bye.
Giuseppe