Splunk Search

How to project alphanumeric values on y axis in timechart?

samindam
Observer

I have a requirement for having start and stop times with there status be projected over time as a line graph.
I have the query below which provides the desired results but when I go to viz it isn't showing anything since the values projected over Y axis are alphanumeric. Is there a way that I can project this on timeline?
Below is my query and ss for the viz and results.
<base search>
| eval epochtime=_time
| eval desired_time=strftime(epochtime, "%b %d %Y %H:%M:%S.%3N")
| rex "INFO : (?<status>\w+)"
| eval Time_and_status= desired_time + status
| timechart span=20m values(Time_and_status)
| fillnull value=0 values(Time_and_status)

On graph I see a flat line all over.Values/StatsValues/StatsViz/GraphViz/Graph

Labels (2)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What (numeric) value is your Y axis going to measure?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...