Dashboards & Visualizations

Multi series column chart with overlay separate y-axis

nirmalya2006
Path Finder

Hi All

I am trying to create a multiseries column chart over time with two different y-axis - one on left and one on right.
My Basic query is as below :

| stats avg(eval(iBatchSize/1024)) as Avg, avg(iDocCount) as Count by _time

What I am trying to achieve is to create column chart as below
The blue columns to show average batch size and the red columns to show document count.
They will come in pairs for a span=1d.
Blue columns will have the y-axis on the left side of the chart and red columns on the right.
This is because the values cannot be brought on the same scale.

alt text

I want to know if this can at all be done.
If so, please guide me.

Thanks in advance

0 Karma

sundareshr
Legend
0 Karma

jkat54
SplunkTrust
SplunkTrust

Converted to answer because chart overlays will do exactly what the requester is asking for.

0 Karma

sundareshr
Legend

@nirmalaya2006 The overlay field in a chart can only be set as a line. You cannot set it as a column.

0 Karma

nirmalya2006
Path Finder

Thant is exactly where I am stuck.

Chart overlay cannot show double columns.
I need to implement a multi series chart but I am unable to do so.

Please help me to get this working.

0 Karma

sundareshr
Legend

I am not aware of a way this can be achieved. Besides, not sure if it is the best format - having two column next to each other with differing scale.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...