Dashboards & Visualizations

How can I make a simple x over y chart

splunktrain9
Loves-to-Learn Everything

I have the following data, and I want a graph with the age as the x axis, and height as the y axis. name and value are fields pulled out of a "rex field=_raw" command.


namevalue

height

age

height

age

height 

age

height 

age

100

1

2

105

3

107

4

108

Labels (2)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It is not clear what sort of chart you want, and given the vagueness of your data, it is unclear what sort might be suitable.

Are all your ages unique i.e. is there a one-to-one relationship between age and height?

Are all these values from the same event or different events?

Have these values been extract (with rex?) into name and value fields?

Are there other values in the events with which can be used to split the data into different series? This isn't strictly required but it might help determine an appropriate solution.

Please provide more precise detail on what it is you are trying to do.

0 Karma

tshah-splunk
Splunk Employee
Splunk Employee

Hey @splunktrain9,

You can create a chart with functions like values() and group it by age field. These can be achieved since using rex also, the fields will be created and can be used in charts. Your query should look something like below:

<your query>
| chart values(height) as height by age

 

---
If you find the answer helpful, an upvote/karma is appreciated
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...