I met a trouble that I want to make the follow chart with splunk, but failed.
For example, I have 3 fields to make a column chart, but I want 2 fields on one column as follow picture.
Who can help me?
No You have to choose between all stacked or all separated columns, you cannot have two columns stacked and one separated.
Bu t you could to stack your columns in one and put the third (test) as overlay, in this way it's graphically separated by the others.
Using web Gui: [Modify -- Modify panels -- Overlay] choose the field for Overlay.
or by source