Bar Chart

[sanjay_shrestha]

Hi,

Here is my data looks like:

project     status
p1            s1
p2            s3
p3           
p4            s1
p5            s2

I would like to create a bar chart as below:

Thanks,

Sanjay

[sanjay_shrestha]

Thanks for the solution.

[somesoni2]

I couldn't fine any options for that so far. Here is another tweak see if this is acceptable for you.

search giving field project, status| eval nStatus=case(status="s1",1,status="s2",2,status="s3",3,1=1,0) | chart max(nStatus) as MyStatus over project by status | rename VALUE as NA

status will appear as legend and bars will have different color for each status.

[sanjay_shrestha]

I was able to create using numerical values, however it would not be verbose. Is there a way to change labels or display reference matching table.

[rahulroy_splunk]

something like this

search giving field project, status | eval nStatus=case(status="s1",1,status="s2",2,status="s3",3,1=1,4) | table project, nStatus

[somesoni2]

I believe the Y axis values have to be numeric, which is not in your case. Other option could be to use a numeric code for your status and do a chart based on that.