Dashboards & Visualizations

How to create a Multi-Series Line Chart?

atomickonline
Engager

I can't figure out how to create a Multi-Series line chart.

For example, the sample data below shows test scores (Result) for the 4 participants over 3 tests.
I'd like to have a line graph for each participant.
X-Axis = GroupNumber (1,2,3,4)
Y-Axis = Result (1-100)
And plotted would be 4 lines, one for each participant with their scores.

My data in Splunk is in the format as represented below under "Sample Data". each is a separate entry that has Name, Result, and GroupNumber

Example Desired Outcome (Data Not Representative to Sample Data):
alt text

Sample Data:
alt text

Thanks

1 Solution

micahkemp
Champion

I think you may be looking for:

| chart first(Result) OVER GroupNumber BY Name

View solution in original post

micahkemp
Champion

I think you may be looking for:

| chart first(Result) OVER GroupNumber BY Name

emottola
Explorer

I looked way too hard to find this. Thank you for your answer!

0 Karma

atomickonline
Engager

Perfect!. Thank you very much. Now that I see the solution, it makes sense.

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...