Chart on splunk dashboard

[tsm0099]

Hello,

I want to create a line/bar chart with some data in a table.

example:

I have data in tabular form as mentioned below :-

column1(string)   |    column2(num)  | cloumn3(time)

X1                              |   12                            | time

X2                              |   9                              | time

X1                              |   10                           | time

X1                              |   5                              | time

X2                              |   15                           | time

I want to create a line graph with time at X-axis and column2 at Y-axis

I want two lines in the graph. One for X1 and one for X2. And when I hover on the line it should indicate if the line is for X1 or X2.

Can someone please help me write the search query for this requirement?

Thanks in advance

[richgalloway · Accepted solution]

Perhaps this will get you started

<your search that produces the table>
| rename cloumn3 as _time
| timechart max(column2) as column2 by column1