Is there a way to customize the column charts label, or the y-axis?
What I want to do is create a column with the count of the field on the bar part of the chart, while on the y-axis is the percentage of that count.
index="index" | eval SLA_status = if(('Resolution SLA' ="Yes"),"Met","Missed") | timechart count by SLA_status | untable _time SLA_status count | eventstats sum(count) as Total by _time | eval perc=round(count*100/Total,2) | eval _time=strftime(_time, "%b %Y") | table _time SLA_status perc | xyseries _time SLA_status perc
You can put an alternate measure on the right, but your calculation and formatting might be complicated. Obviously, if you were doing percentage over time, then the Y number would not generally be consistent anyway, but if you are doing a static moment or period, then that could work well enough.