Dashboards & Visualizations

How to create a bi-directional bar chart?

rajeshjlnt
Path Finder

I would like to create a bi-directional bar chart. I have 2 fields monthly closed and monthly created tickets, I want to plot a bar chart with 1 field above X axis and another below x axis. I tired all options available in Chart overlay in UI. Also searched for xml code, but with no success.
Can anybody provide some pointers?

Tags (1)
0 Karma
1 Solution

to4kawa
Ultra Champion
| gentimes start=01/01/2019 
| rename starttime as _time 
| timechart span=1month count 
| eval time = strftime(_time ,"%b %Y") 
| table time count
| eval count2=count * -1

Visualization >> Bar Chart
How about this?

View solution in original post

0 Karma

to4kawa
Ultra Champion
| gentimes start=01/01/2019 
| rename starttime as _time 
| timechart span=1month count 
| eval time = strftime(_time ,"%b %Y") 
| table time count
| eval count2=count * -1

Visualization >> Bar Chart
How about this?

0 Karma

rajeshjlnt
Path Finder

This is how i want the chart to look but bars below x axis show come with positive numbers :).
My data is created tickets vs closed tickets, so both of them will positive numbers.

0 Karma

to4kawa
Ultra Champion

default Bar Chart can't display strict bi-directional bar chart
In practice, the X axis is negative, but it is displayed.

what's your query?
so both of them will positive numbers.
I see, Finally you can make either one negative.

0 Karma

rajeshjlnt
Path Finder

I agree, i got it working by converting on field to negative number. Thank you for the help @to4kawa

0 Karma

to4kawa
Ultra Champion

OK, I see. Happy Splunking.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...