Dashboards & Visualizations

Set x-axis over multiple topic at line graph

Questioner
Path Finder

I have data like this,

 1st course2cd course3rd course4th course
A3422
B2513

 

I would like this data to look like this using a line graph,

Questioner_0-1690186551683.png

I'm trying to use this code, but the when i use multiple "over" data, an error occurs.

chart avg(x) as A over "1st course", "2cd course"

How Could I make this line graph? 

 

Labels (1)
Tags (3)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

Your first column needs a field name (I have chosen User for this demonstration). Essentially, you need to use transpose.

| makeresults 
| fields - _time
| eval _raw="User	1st course	2cd course	3rd course	4th course
A	3	4	2	2
B	2	5	1	3"
| multikv forceheader=1
| table User *_course
``` The line above sets up demonstration data in line with your example ```
| transpose 0 header_field=User column_name=Course

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Your first column needs a field name (I have chosen User for this demonstration). Essentially, you need to use transpose.

| makeresults 
| fields - _time
| eval _raw="User	1st course	2cd course	3rd course	4th course
A	3	4	2	2
B	2	5	1	3"
| multikv forceheader=1
| table User *_course
``` The line above sets up demonstration data in line with your example ```
| transpose 0 header_field=User column_name=Course
0 Karma

Questioner
Path Finder

I solved it!

Thank you for your help 🙂

0 Karma
Get Updates on the Splunk Community!

Simplifying the Analyst Experience with Finding-based Detections

    Splunk invites you to an engaging Tech Talk focused on streamlining security operations with ...

[Puzzles] Solve, Learn, Repeat: Word Search

This challenge was first posted on Slack #puzzles channelThis puzzle is based on a letter grid containing ...

[Puzzles] Solve, Learn, Repeat: Advent of Code - Day 4

Advent of CodeIn order to participate in these challenges, you will need to register with the Advent of Code ...