My Splunk Objects looks like this:-
I want to draw a timechart with key as data.* and value as value(data.*)
I tried using this query
type=info | timechart values(data.0) as 0, values(data.1) as 1, values(data.2) as 2, values(data.3) as 3, values(data.4) as 4, values(data.5) as 5, values(data.6) as 6, values(data.7) as 7
and this worked fine for me.
But I want to extend this query to number 'n' and avoid having multiple values(attrs.x) as x
Is there a simpler way to do it?
timechart values(data.*) as *
View solution in original post