Splunk Search

How to overlay a line chart on a column chart showing timerange??

Nikki1510
Engager

Hey everyone. I am a newbie to splunk and i am stuck at this problem. So i have a column chart which shows data for a time range between two dates ex. 6/9/2020-6/23/2020 like in the pic below.

IMG_20200616_124035__01__01.jpg

So the query i used for this is 

Index=main sourcetype = timeline | eval dates= beginning_date."-".ending_date | stats count by dates, target | xyseries dates target count

 So now what i want is...if i append another search to this which contains data on 6/15/2020, It is treating 6/15/2020 as a seperate date. Like this

IMG_20200616_152129__01.jpg

In the above image i want the line chart on date 2020-06-15 to go on to top of the column chart as that date lies in between 2020-06-09   -   2020-06-23(changed format of time).i want to overlay line chart on top of column chart. 

Here these are the fields i used

beginning date.              Ending date

6/9/2020.                         6/23/2020

And i want to create the query with these fields and not _time.

Any help is appreciated and if there is anything u didn't understand in my question plz let me know. Thanks a lot.

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...