I have the following search:
....| stats sum(callduration) as "totalcallduration" by Companycalls
Currently my search give me the result in second. I'm trying to get this result convert to duration so that I could map it on my bar chart. Is there an option that splunk could map bar chart for duration like excel? I want to get it to look like this:
...| stats sum(callduration) as totalcallduration by Companycalls | eval totalcallduration=tostring(totalcallduration,"duration")
By this I mean the y-axis display number like 0-1000 instead of time. And at the end splunk generate an empty bar chart
But this is for data showing purposes, I can not replace the second with just random second. Is there anything else I could do?