Display table into a timechart

[hishamjan]

Hi,

I would like to display my table into a timechart/chart graph instead.

Below is the screenshot attached of the table via my search query:

hishamjan_0-1614682775656.png

I would like to convert this into a timechart/chart graph where memFreePct and memUsedPct is shown per time for each host, A to E.

thanks

[ITWhisperer]

There is no time component in your search results

[hishamjan]

here is my search query:

source="vmstat"
            | dedup host 
 | eval host=upper(host)
            | eval FreeGBs=FreeMBytes/1024, TotalGBs=TotalMBytes/1024, UsedGBs=UsedMBytes/1024
            | table host memFreePct memUsedPct
| sort host

[ITWhisperer]

So, the first thing you need to do is modify this query to return a time element (assuming that is in your source data)

[hishamjan]

that's exactly what I'm unable to do 🙂

[ITWhisperer]

Start with your data - what fields do you have in vmstat?