Splunk Search

Display the different color based on status value and Client Wise.


run the below query and got the output

index=xxx sc_status=201 OR sc_status=200

| stats count(eval(sc_status)) as "Total Hits", avg(time_taken) as Avg_Time_Taken by date, cs_host, sc_status


required different Color based on status on y-axis(Total value)

Required Out as per the below screen shot.


Labels (1)
0 Karma

Ultra Champion

Splunk column chart cannot be displayed with two values on x-axis.

This is not possible because the chart is trying to separate the time and host values.

0 Karma
Get Updates on the Splunk Community!

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...

What’s New in Splunk Cloud Platform 9.1.2308?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2308! Analysts can ...