Reporting

How can I create line/area charts over fields other than _time using Pivot?

frank_zhang
Path Finder

Hi,

I'm learning Splunk6 pivot features, and noticed when I choose Line Chart or Area Chart in Pivot editor, X-Axis is hardcoded with "Time". Is there any reason that it doesn't allow to create line/area chart over fields other than time? Is there any workaround besides using SPL?

Thanks.

Tags (1)

gauldridge
Path Finder

I can't say for sure but it might be that line and area charts are well suited for showing trends over time. However, if your goal is to create a dashboard panel using Pivot, you can create a bar or column graph in Pivot (which allows you to choose the X-axis field), save the search as a dashboard panel, and then change the visualization to line/area using the panel editor in the dashboard.

frank_zhang
Path Finder

Thanks, I think this workaround solved my problem.

0 Karma

felipetesta
Path Finder

Even in 6.2.2 the Line Chart in Pivot doesn't accept a custom X-axis field. The solution by gauldridge worked for me too. It is still a loooong way to get a multi-day overlapped chart, but at least it is now possible with pivots.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Thanks for the Memories! Splunk University, .conf25, and our Community

Thank you to everyone in the Splunk Community who joined us for .conf25, which kicked off with our iconic ...

Data Persistence in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. What happens if the OpenTelemetry collector ...

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Now On Demand Whether you're managing complex deployments or looking to future-proof your data ...