I have created the graph on hourly basis so it will display counts on the bar based on hours . Now my Requirement is I wanna Display one message on the Graph Totalcount=X
Try adding following at the end of your search
If your current search result contains _time and one field say "count"
| eventstats sum(count) as TotalCount
If your search result contains _time and several dynamic column names,
| addtotals fieldname="Totalcount"
Hi @ashok968,
Can you please share your current SPL and its output and a visual representation of what output you may need to fulfill the requirement? Please mask the relevant sensitive content if any.
Thank you