I want to plot a column chart with time vs day. So day will be in X-axis and time will be in Y-axis.
I am using the following, but it's not working :
| inputlookup time.csv |eval DT=strftime(strptime(Time,"%H:%M:%S"), "%I:%M:%S %p") | chart values(DT) over Day by Time
But in the column visualization, it is not showing any data because the value is not in a numeric format for the Y-axis. Is there any way to plot the graph in the Y-axis as per our format, but Splunk would consider it numeric value i.e., number of seconds, etc internally ?
Kindly help urgently !!
Awaiting reply !!
Give this a try:
| inputlookup time.csv |eval DT=strftime(strptime(Time,"%H:%M:%S"), "%I:%M:%S %p") | chart count over Day by Time
I am happy to help you more if you supply a couple of rows of sample data.
@abhayneilam Charts expect y-axis data to be numeric.
If your requirement is something else please provide a mock with data and screenshot of your expected output.