Dashboards & Visualizations

How do I chart top categories over time?

POR160893
Builder

Hi,

I need to create a chart to show top categories per time.

At the moment, the timechart I am getting is placing the time axis on the y-axis and the categories on the x-axis. In addition, there are over 50 possible categories and the user should be seeing the top 20 categories with the respective count for each time period. So I would imagine 20 line of the graph, no?

Here is what I currently have:

POR160893_0-1647867579949.png

 



Can you please help?


Many thanks,

Patrick

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Change the chart type from Bar chart to Column chart

POR160893
Builder

Thanks 🙂

As I am showing the top categories by count over time, one of the categories makes up over 98% of the entries,. So, one the chart, that entry appears to be the only category being hit. 

POR160893_0-1647868943770.png

 



Is it possible to shew the the count bar so that the other categories become visible too?


0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

A couple of things you could try.

Change the y-axis scale to a logarithmic scale.

ITWhisperer_0-1647869493558.png

Move the high volume category into an overlay with View as Axis On.

ITWhisperer_1-1647869647783.png

 

POR160893
Builder

Perfect, this solved my issue 100% 😀

0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...