help on displaying results under timechart

[jip31]

hi
I would like to display the results of a timechart without doing another table search
is it possible please??
thanks

[gcusello · Accepted solution]

Hi @jip31,
could you describe better your need?
Anyway, before a timechart you don't need a table command, but only a search to find the results to display using the timechart command.

Ciao.
Giuseppe

[jip31]

hi
instead displaying the values on the axis, I would like to display the values under a table below
like in the screenshot

[gcusello]

Hi @jip31,
if you want to display a timechart as a table and not in graphical mode, you have to choose for your panel a table visualization and not a graphic.

Ciao.
Giuseppe

[jip31]

Yes sure...
But my question concerns both, graph and table

[gcusello]

Hi @jip31,
the best solution is to use two panels with the same search one with the graphic and one with the table.
To avoid to run two searches instead only one you can use a Post Process Search to display in two panels.
You can find infos at https://docs.splunk.com/Documentation/Splunk/8.0.2/Viz/Savedsearches#Post-process_searches_2 or using the Splunk Dashboard Examples App ( https://splunkbase.splunk.com/app/1603/ ).

Ciao.
Giuseppe