Splunk Search

How to graph a line chart of two field values over time from a csv log file?

lbogle
Contributor

Hello Splunkers,
I feel like I have the most basic of questions here but I can't get it to work. I have a .csv log file with some info. The key components of which is a field "Status". Status=Rejected or Status=Accepted. I am trying to get a line chart of the amount of Rejected over time along with the amount of Accepted over time but I can't figure it out. It's got to be a basic one. What am I missing?
Thanks everyone.

Tags (3)
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Have you tried something like this?

search for your CSV events | timechart count by Status

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Have you tried something like this?

search for your CSV events | timechart count by Status

lbogle
Contributor

That was it! Thanks.

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...