Splunk Search

How to overlay a line chart on a column chart showing timerange??


Hey everyone. I am a newbie to splunk and i am stuck at this problem. So i have a column chart which shows data for a time range between two dates ex. 6/9/2020-6/23/2020 like in the pic below.


So the query i used for this is 

Index=main sourcetype = timeline | eval dates= beginning_date."-".ending_date | stats count by dates, target | xyseries dates target count

 So now what i want is...if i append another search to this which contains data on 6/15/2020, It is treating 6/15/2020 as a seperate date. Like this


In the above image i want the line chart on date 2020-06-15 to go on to top of the column chart as that date lies in between 2020-06-09   -   2020-06-23(changed format of time).i want to overlay line chart on top of column chart. 

Here these are the fields i used

beginning date.              Ending date

6/9/2020.                         6/23/2020

And i want to create the query with these fields and not _time.

Any help is appreciated and if there is anything u didn't understand in my question plz let me know. Thanks a lot.

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...