How to timechart nonnumeric field

[disha]

I may be overthinks this.There must be some way of doing it. I have a data like :

How can I display values of Debug with time in chart as Debug is not any numeric field. How to scale it on y axis by one way or another? Please help.
May Be can I make an SLA line and display Debug strhing on that SLA?
Please Please suggest.
Thanks in advance.
Disha

[gnovak]

If you just wanted to display the Debug String and the time the string came in, would just putting them in a table view work, like this:

sourcetype="myagent"|spath path="EID" output="EventID"|search EventID=14|spath path="DBG" output=Debug|table _time,Debug | table _time Debug

I'm not sure you can actually put the entire debug string in a chart like that....What would the chart be graphing as it's not a numerical field?

[disha]

Can we do like this..when user just scroll over x axis,he can see the Debug string in tooltip? 😞

[disha]

No, I just need to display the Debug string with _time as We group together the info in DBG field that we want to display so just displaying the entire string is fine.

[gnovak]

When you say the values of Debug do you mean the values of DEVID, MOD and LOG? If these are things you'd like to display, I'd first extract these values into fields either using the Field Extractor or regular expressions in props.conf.