How to chart the top 3 users over many months?

[ManusMenon]

Hello everyone,

I have a query on how to chart top user count over a period of months. My search is such that it gives the top 5 users of the previous month. But i would like to create a chart which would give me user count over the months.

Kindly advise on how to use the chart function for doing this.

With regards,
Manus

[ManusMenon · Accepted solution]

Hello All,

I found my answer in the book Exploring Splunk by David Carusso. Chapter : 6 Recipies for Monitoring and Alerting, page 82. The example is titled "Comparing Today's Top Values to Last Month's".

Thanks,Manus