Dashboards & Visualizations

Question about Column Charts

Moreilly97
Path Finder

Thanks in advance for any answers.

So I have three fields; ticketNumber , group and TimeBlock

Every ticketNumber has a group it is assigned to and a TimeBlock that it falls into for example; Ticket02 with group IT2 and assigned within 1Hour.

I want to first groups the Tickets with their groups, and then chart the groups against the TimeBlocks

So the x axis would be 1Hour 2Hour 3Hour etc and they would have the groups and when hovered over it displays the amount of tickets.

0 Karma
1 Solution

somesoni2
Revered Legend

Try this

your current search giving fields ticketNumber , group and TimeBlock
| chart count(ticketNumber) over TimeBlock by group

View solution in original post

0 Karma

somesoni2
Revered Legend

Try this

your current search giving fields ticketNumber , group and TimeBlock
| chart count(ticketNumber) over TimeBlock by group
0 Karma

Moreilly97
Path Finder

Thank you so much for the quick reply and solution ! Ive been trying to use

| chart count(ticketNumber) by group over TimeBlock

And I was wondering why it wasnt working. Thanks again.

0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...