How to create a new variable using Eval and then pass it in Timechart

[aditsss]

Hi Everyone,

I need to create one variable using Eval my variable name is  - JOB_EXEC_TIME how can I create a variable using eval.

And then I need to pass it in below query:

timechart sum(JOB_EXEC_TIME) as TotalExecTime by JOB_NM

Can someone guide me How can I do this in splunk.

[kamlesh_vaghela]

@aditsss 

Can you please share more details where you want to create variable like (from input or search result) and how you want to use in time chart?

[aditsss]

@kamlesh_vaghela 

Currently I am passing JOB_EXEC_TIME is my timechart like below:

 timechart sum(JOB_EXEC_TIME) as TotalExecTime by JOB_NM

Now I want to pass -JOB_EXEC_TIME(reverse order) in timechart.How can I pass that.

[kamlesh_vaghela]

Did you tried?

|timechart sum("JOB_EXEC_TIME(reverse order)") as TotalExecTime by JOB_NM

[aditsss]

@kamlesh_vaghela 

nothing is coming

[kamlesh_vaghela]

Is it possible to share sample OP of search before time chart?

[aditsss]

@kamlesh_vaghela 

what is OP?

[kamlesh_vaghela]

Output