Splunk Search

How to create a chart for status value

quadealexander
Explorer

Hi,

I'm new to Splunk and I've created a table with the following headers: Hardware-Name, Environment, Portfolio, Vendor/Model and Status.

I now want to create a chart that shows me how often a value of "Status" occurs in each Environment.
Any ideas anybody?

Thx in advance.

0 Karma
1 Solution

ekraemer_splunk
Splunk Employee
Splunk Employee

I am also new to Splunk, but I will try to help. If you would like to simply count how many times a value for status appears for each value of Environment, you can use:

| chart count(Status) by Environment

If you want separate categories for each value of status as well, you can try:

| chart count over Environment by Status

I hope that helps!

View solution in original post

ekraemer_splunk
Splunk Employee
Splunk Employee

I am also new to Splunk, but I will try to help. If you would like to simply count how many times a value for status appears for each value of Environment, you can use:

| chart count(Status) by Environment

If you want separate categories for each value of status as well, you can try:

| chart count over Environment by Status

I hope that helps!

quadealexander
Explorer

Thx that worked just fine 🙂

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...