I want to use timechart as instead of sparkline.
index=test | table A B C D | join A [ search index=test |
Do you have any suggestions?
Do you want help with post Processing to run single base search for table and timechart? While displaying can you display timechart on click of a particular table row? If yes please check out Table Row Expansion (More Details) and In-Page Drilldown with Perma-linking examples in Splunk 6.x Dashboard Examples app
I appreciate your suggestion.
It is displayed in one figure, it is easy to see, but this time I want to display it separately.