Dashboards & Visualizations

How to combine two bar graph panels into one?

pavanae
Builder

I have a query 1 as follows

My_Query1 | stats count by field_A

In which It displays the result as follows in the bar graph with count on x-axis and field_A values on Y-axis

alt text

Now I have another query as follows

My_Query2..... | chart count by field_A, field_B

In which it displays the result as follows in a bar graph

alt text

Here field_A is same on both the queries

Now how to modify my query to combine both the searches and display the a single bar graph like the query_1's dashboard but it should also contains the color slices that have for Query_2 dashboard.

What I am trying to say that I only need one dashboard panel which covers both the above panels but instead of having a query_2 panel. I want to see those color slices on query_1 panel

0 Karma
1 Solution

niketn
Legend

@pavanae, it still seems to be confusing. Do you want just stacked bar chart instead of stacked 100%?

From Splunk UI Edit Panel > Format > General > Stack Mode > Choose stacked instead of stacked100

https://docs.splunk.com/Splexicon:Stackmode

If this is not what you want, can you share a mock screenshot of desired output?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@pavanae, it still seems to be confusing. Do you want just stacked bar chart instead of stacked 100%?

From Splunk UI Edit Panel > Format > General > Stack Mode > Choose stacked instead of stacked100

https://docs.splunk.com/Splexicon:Stackmode

If this is not what you want, can you share a mock screenshot of desired output?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

pavanae
Builder

Thanks @niketnilay. That's what I'm looking for. Thanks again.

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

@Pavanae please mark the answer as accepted if this answered your question 🙂

0 Karma

cmerriman
Super Champion

Can you provide a sample output of what you want the chart to look like?

0 Karma

pavanae
Builder

Thanks for the response @cmerriman. As you can see on by second panel picture you can see the color partitions(3 different field values) of field_B for each field_A value in a 100% bar graph format. Instead I want to see the same partions on my first picture. Imagine my first picture with 2nd picture color partitions but here I want to see the same uneven bar graph lines with the 3 partitions.

Sorry If its still confusing.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...