Dashboards & Visualizations

Timechart for addtotals value

thomas6m
New Member

Hi Team,
I am trying to create timechart addtotals value. But when I using the query, I am getting Total, others and few more lines. Please let me know how to suppress/hide all line other than addtotals (Total) value.

index=int_gcg_apac_pcf_application_dm_169688 OR index=int_gcg_apac_pcf_foundation_dm_169688 cf_org_name=* cf_space_name=* cf_app_name=* instance_index=*|bucket _time span=1m| dedup _time cf_org_name cf_space_name cf_app_name instance_index| fields _time cf_org_name cf_space_name cf_app_name instance_index|timechart span=1m count(instance_index) by cf_app_name | addtotals

Regards,
Tom

Labels (1)
Tags (1)
0 Karma
1 Solution

to4kawa
Ultra Champion
....
| fields _time Total

View solution in original post

0 Karma

thomas6m
New Member

thanks you so much. It worked. \

0 Karma

to4kawa
Ultra Champion
....
| fields _time Total
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...