For example i have the below search
eval Time_To_Map=strftime(strptime(STATUS_TIME,"%Y-%m-%d-%H.%M.%S.%3N"),"%H.%M") | stats values(Time_To_Map) as TME by COB_DATE,VSNAME,SLICEKEY
Now, I want a chart that has X axis as COB_DATE and Y axis as TME , and as I hover through the chart, the value of VSNAME,SLICEKEY should appear
Values for COB_DATE are YYYYMMDD
Values of TME are HH.MM
Values of VSNAME,SLICEKEY are strings
@manijain you would need Simple XML JS extension (possibly CSS extension as well) to do this. Refer to @jeffland 's solution: https://answers.splunk.com/answers/337329/is-it-possible-to-show-a-custom-tooltip-whenever-a.html