Re: split line graph

Dashboards & Visualizations

trying to get 2 different lines one for HDX and the other for RDP, can anyone help please?

Try replacing the last stats command with timechart.

| timechart count by protocol

---
If this reply helps you, Karma would be appreciated.

Try

| chart count by _time protocol

Get Updates on the Splunk Community!

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability As ...

split line graph