Dashboards & Visualizations

How to have two values in y-axis and one value in x-axis as Splunk bar chart?

Vish
Explorer

I have created a dbx query which has 6 columns in select statement as shown below(chart 1),now I want to have two of the column in y-axis which is first_response and closure_time and x-axis as MONTH as shown in below chart(chart 2) and the other 3 columns such as work_item_id,status and filed_against has to be a filter.

chart 1:

Vish_2-1683192779906.png

chart 2:

Vish_0-1683191932884.png

 

 

 

Labels (1)
Tags (1)
0 Karma

TrangCIC81
Communicator


Can you try with settings in Visualization tab in Splunk Search as the screenshots?

TrangCIC81_0-1683795382580.png

TrangCIC81_1-1683795525640.png

 

Where series A, B are the two values in y-axis.

Instead, if you can find  "Clustered Column" option in Visualization chart options in your current Splunk version, then can use it directly without settings as the above.

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...