Dashboards & Visualizations

Question about Column Charts

Path Finder

Thanks in advance for any answers.

So I have three fields; ticketNumber , group and TimeBlock

Every ticketNumber has a group it is assigned to and a TimeBlock that it falls into for example; Ticket02 with group IT2 and assigned within 1Hour.

I want to first groups the Tickets with their groups, and then chart the groups against the TimeBlocks

So the x axis would be 1Hour 2Hour 3Hour etc and they would have the groups and when hovered over it displays the amount of tickets.

0 Karma
1 Solution

Revered Legend

Try this

your current search giving fields ticketNumber , group and TimeBlock
| chart count(ticketNumber) over TimeBlock by group

View solution in original post

0 Karma

Revered Legend

Try this

your current search giving fields ticketNumber , group and TimeBlock
| chart count(ticketNumber) over TimeBlock by group

View solution in original post

0 Karma

Path Finder

Thank you so much for the quick reply and solution ! Ive been trying to use

| chart count(ticketNumber) by group over TimeBlock

And I was wondering why it wasnt working. Thanks again.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!