I have a query 1 as follows
My_Query1 | stats count by field_A
In which It displays the result as follows in the bar graph with count on x-axis and field_A values on Y-axis
Now I have another query as follows
My_Query2..... | chart count by field_A, field_B
In which it displays the result as follows in a bar graph
Here field_A is same on both the queries
Now how to modify my query to combine both the searches and display the a single bar graph like the query_1's dashboard but it should also contains the color slices that have for Query_2 dashboard.
What I am trying to say that I only need one dashboard panel which covers both the above panels but instead of having a query_2 panel. I want to see those color slices on query_1 panel
@pavanae, it still seems to be confusing. Do you want just stacked bar chart instead of stacked 100%?
From Splunk UI Edit Panel > Format > General > Stack Mode
> Choose stacked
instead of stacked100
https://docs.splunk.com/Splexicon:Stackmode
If this is not what you want, can you share a mock screenshot of desired output?
@pavanae, it still seems to be confusing. Do you want just stacked bar chart instead of stacked 100%?
From Splunk UI Edit Panel > Format > General > Stack Mode
> Choose stacked
instead of stacked100
https://docs.splunk.com/Splexicon:Stackmode
If this is not what you want, can you share a mock screenshot of desired output?
Thanks @niketnilay. That's what I'm looking for. Thanks again.
@Pavanae please mark the answer as accepted if this answered your question 🙂
Can you provide a sample output of what you want the chart to look like?
Thanks for the response @cmerriman. As you can see on by second panel picture you can see the color partitions(3 different field values) of field_B for each field_A value in a 100% bar graph format. Instead I want to see the same partions on my first picture. Imagine my first picture with 2nd picture color partitions but here I want to see the same uneven bar graph lines with the 3 partitions.
Sorry If its still confusing.