Splunk Search

How do you overlay charts that are linked together with a field?

splunkuser2127
Loves-to-Learn

I have 3 extraction fields: "guid", "runtime_general", "runtime_specific".

There is also a value "A" that I will search to get the values I need.
I want to overlay runtime_general and runtime_specific (y-axis) and have the x-axis be guid.

I have two pertinent log types:
1) "A: guid, runtime_general" where A is always the same (as I'm searching on A)
2) "guid, runtime_specific"

How do I chart all the guids I get by searching for value A, and overlay it with both runtimes? I'm very unfamiliar with Splunk so any help would be appreciated.

0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...