Dashboards & Visualizations

Multi series column chart with overlay separate y-axis

nirmalya2006
Path Finder

Hi All

I am trying to create a multiseries column chart over time with two different y-axis - one on left and one on right.
My Basic query is as below :

| stats avg(eval(iBatchSize/1024)) as Avg, avg(iDocCount) as Count by _time

What I am trying to achieve is to create column chart as below
The blue columns to show average batch size and the red columns to show document count.
They will come in pairs for a span=1d.
Blue columns will have the y-axis on the left side of the chart and red columns on the right.
This is because the values cannot be brought on the same scale.

alt text

I want to know if this can at all be done.
If so, please guide me.

Thanks in advance

0 Karma

sundareshr
Legend
0 Karma

jkat54
SplunkTrust
SplunkTrust

Converted to answer because chart overlays will do exactly what the requester is asking for.

0 Karma

sundareshr
Legend

@nirmalaya2006 The overlay field in a chart can only be set as a line. You cannot set it as a column.

0 Karma

nirmalya2006
Path Finder

Thant is exactly where I am stuck.

Chart overlay cannot show double columns.
I need to implement a multi series chart but I am unable to do so.

Please help me to get this working.

0 Karma

sundareshr
Legend

I am not aware of a way this can be achieved. Besides, not sure if it is the best format - having two column next to each other with differing scale.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...