Dashboards & Visualizations

How to create a timechart for specific field value aggregations?

POR160893
Builder

Hi,

I am unable to create a timechart for specific field value aggregations. I have one field with 4 possible values. One timechart needs to be the total number across all 4 values and the second timechart meeds to be the total over 2 field values. The only thing on the legend should be TOTAL from the timechart.

Here is what my timechart and XML code currently looks like:
Cannot add totals on timecharts.PNG
And
Cannot add totals on timecharts - XML.PNG

Can you please help?

Thanks,

Patrick

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Remove the "by block_descrip" from both timechart commands

POR160893
Builder

Perfect, worked like a charm. 😃
Gave a Karma

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...