want to combine time chart and table

[oda]

I want to use timechart as instead of sparkline.

It is the current search sentence.

index=test | table A B C D | join A [ search index=test |

chart sparkline(max(B)) by A ] | makemv delim="," setsv=true sparkline(max(A))

Do you have any suggestions?

Thanks.

[jkat54]

Add _time to your table.

[oda]

Thank you for answering. But,I would like to have a way like tableau.

[jkat54]

Can you share a link or a screenshot of what you mean?

[oda]

Thank you for contacting.
Could you check it because I added a screenshot?

[jkat54]

Try this

index=test |timechart max(A) max(B) max(C) max(D)

[oda]

I appreciate your suggestion.
It is displayed in one figure, it is easy to see, but this time I want to display it separately.

For example, every host.

[niketn]

Do you want help with post Processing to run single base search for table and timechart? While displaying can you display timechart on click of a particular table row? If yes please check out Table Row Expansion (More Details) and In-Page Drilldown with Perma-linking examples in Splunk 6.x Dashboard Examples app

[oda]

Thank you. I am glad your reply.However, I made that setting.It can display only one graph.I would like to have a way like tableau.Best regards.