Hi looking to create a time chart that has duration on the y axis and start date on the x-axis. The Y- axis is in hours and the x-axis is the start dates for the last ten days.
I am new to Splunk so don't really know to do it.
What have you tried so far?
Assuming you have calculated the duration field already, you can use the timechart command to create the chart.
<<your search for duration>>
| timechart span=1d max(duration) as duration
What have you tried so far?
Assuming you have calculated the duration field already, you can use the timechart command to create the chart.
<<your search for duration>>
| timechart span=1d max(duration) as duration