Splunk Search

How to edit my stats search to display a bar chart?

kiran331
Builder

Hi

I have a data with fields OS and Name. I need to show the count and values of OS for Each Name like on X-axis all Names with bar graph showing OS and its count. Any suggestions?

Search I'm using:

base query.. | stats count(OS) values(OS) by Name

But it's not working as expected.

0 Karma
1 Solution

niketn
Legend

Try this

 base query.. 
| chart count over Name by OS
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

Try this

 base query.. 
| chart count over Name by OS
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...