Hi,
I want to interchange axis in timechart graph. For eg. for my chart, X-axis is requests_per_sec and Y-axis is _time.
I want to interchange these axis i.e. X-axis as _time and Y-axis as requests_per_sec. How can i do that ?
pls use this and let me know if it works for you:
chart count over _time by requests_per_sec
No,, it is not giving the output which i want
Hey Allampally,
You can try using this:
untable requests_per_sec _time | xyseries _time requests_per_sec
Or refer this link:
https://answers.splunk.com/answers/1286/is-there-a-way-to-get-a-result-that-looks-like-timechart-but...
Let me know if this helps!!
seems, something is missing in xyseries,, it is expecting one more field. Not sure what to enter there apart from _time and requests_per_sec