Dashboards & Visualizations

split line graph

triva79
Explorer

trying to get 2 different lines one for HDX and the other for RDP, can anyone help please?

 

triva79_0-1716222032781.png

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Try replacing the last stats command with timechart.

| timechart count by protocol

 

---
If this reply helps you, Karma would be appreciated.
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Try

| chart count by _time protocol
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...

Developer Spotlight with Guilhem Marchand

From Splunk Engineer to Founder: The Journey Behind TrackMe    After spending over 12 years working full time ...

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...