Splunk Search

How can I create a chart for each column?

madisonAvalos
Engager

I have 10 columns with the name of a server, and each server has its average per day. How can I create a panel for each column that I have? In this case, I need to show 10. Any help? Right now, it only shows me everything all in the same panel.

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Assuming you currently have a single chart with many colours in one chart, have you tried setting "Multi-series Mode" to Yes in the Format menu? That should split each colour out into its own chart.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Assuming you currently have a single chart with many colours in one chart, have you tried setting "Multi-series Mode" to Yes in the Format menu? That should split each colour out into its own chart.

madisonAvalos
Engager

It works! Thank you sooooo much

One last question
So i have 45 servers with own chart.
Can i put the name of the server on the top of each chart?

0 Karma

woodcock
Esteemed Legend

Show the search that is generating the current panel's table.

0 Karma

madisonAvalos
Engager

i have like this:
DAY| Server1 | server 2 | server 3
1 | 2.3 | 3.2 | 1.2
2 | 1.2 | 0.1 | 3.2

my search:
| dbquery "SCOM/SQL" "SELECT datepart(day,interval) [day], convert(dec(12,2),avg(average2)) [avg], ServerName
FROM [Performance].[vw_ServerShortName] JOIN [Performance].[tbl_PeformanceResult] ON [Performance].[tbl_PeformanceResult].Displayname2=[Performance].[vw_ServerShortName].Displayname2 WHERE Performance='Lync' GROUP BY datepart(day,interval), ServerName;
"| sort by day | chart list(avg) by day, ServerName

So i need:

Name: server 1
chart 1 x->Days Y-> Average
server 2
chart2 x-> Days y -> Average

in the same Dashboard maybe in different panels... But 1 chart per Server

Thankyou

0 Karma

renjith_nair
Legend

Sorry didn't get your requirement fully. Do you mean you have server names as field names and each has a row for average, something like below.

server1 server2 ....server10
90 80 60

It will be great if you could share your current search and dashboard and what you want to achieve

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...

Upgrade Prep for 10.4, Network Observability Deep Dives, and More from Splunk Lantern

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Splunk Developer Day announcements: AI agents, MCP tools, Forecasting, and Custom ...

Splunk Developer Day was packed with product and platform updates for developers building in the AI ...