Reporting
Highlighted

How can I create line/area charts over fields other than _time using Pivot?

Path Finder

Hi,

I'm learning Splunk6 pivot features, and noticed when I choose Line Chart or Area Chart in Pivot editor, X-Axis is hardcoded with "Time". Is there any reason that it doesn't allow to create line/area chart over fields other than time? Is there any workaround besides using SPL?

Thanks.

Tags (1)
Highlighted

Re: How can I create line/area charts over fields other than _time using Pivot?

Path Finder

I can't say for sure but it might be that line and area charts are well suited for showing trends over time. However, if your goal is to create a dashboard panel using Pivot, you can create a bar or column graph in Pivot (which allows you to choose the X-axis field), save the search as a dashboard panel, and then change the visualization to line/area using the panel editor in the dashboard.

Highlighted

Re: How can I create line/area charts over fields other than _time using Pivot?

Path Finder

Thanks, I think this workaround solved my problem.

0 Karma
Highlighted

Re: How can I create line/area charts over fields other than _time using Pivot?

Path Finder

Even in 6.2.2 the Line Chart in Pivot doesn't accept a custom X-axis field. The solution by gauldridge worked for me too. It is still a loooong way to get a multi-day overlapped chart, but at least it is now possible with pivots.

0 Karma