Splunk Search

How can I configure axis and series with module

melonman
Motivator

Hi There,

I would like to know how to configure axis. With the following XML, I got _time on Y-axis and count on X-Axis, which I have to invert X to be _time, Y to be count.

eventtype="A" OR eventtype="B" | timechart span=1mon count by eventtype -2mon@mon @mon bar stacked

Which parameteter should I add?

Thank you

Tags (1)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

How about using the column graph instead of the bar graph?

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

How about using the column graph instead of the bar graph?

melonman
Motivator

thanks, this worked!

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...