Splunk Search

How to create a chart for status value

quadealexander
Explorer

Hi,

I'm new to Splunk and I've created a table with the following headers: Hardware-Name, Environment, Portfolio, Vendor/Model and Status.

I now want to create a chart that shows me how often a value of "Status" occurs in each Environment.
Any ideas anybody?

Thx in advance.

0 Karma
1 Solution

ekraemer_splunk
Splunk Employee
Splunk Employee

I am also new to Splunk, but I will try to help. If you would like to simply count how many times a value for status appears for each value of Environment, you can use:

| chart count(Status) by Environment

If you want separate categories for each value of status as well, you can try:

| chart count over Environment by Status

I hope that helps!

View solution in original post

ekraemer_splunk
Splunk Employee
Splunk Employee

I am also new to Splunk, but I will try to help. If you would like to simply count how many times a value for status appears for each value of Environment, you can use:

| chart count(Status) by Environment

If you want separate categories for each value of status as well, you can try:

| chart count over Environment by Status

I hope that helps!

quadealexander
Explorer

Thx that worked just fine 🙂

0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...