I've got a line timechart of some data based on one search. I'd like to take another search and add vertical lines/bars to the timechart whenever an event occurs. (This latter search is for code releases, so I can see how changes various other stats correlate with releases.) Is there any way to do this with splunk?
Hi,
I'm a newbie to Splunk. I had a similar question sometime back.
I used "append" to combine two searches in one graph.
http://docs.splunk.com/Documentation/Splunk/4.3.3/SearchReference/Append
Again, I'm no pro. Just an approach I tried.
Updated link to Append documentation:
https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/Append