Is it possible to set a variable as the x-axis in a table?

[kinda]

Hello,

I don't specifically have anything down yet, I was just wondering if it would be possible to set a variable as the top row (x axis), the x axis would be auto populated by a variable.

Thanks in advance!

[woodcock · Accepted solution]

Yes, this is possible and very easy. You just use the chart (or timechart ) command instead of the stats command; see here:

https://answers.splunk.com/answers/32001/difference-between-stats-and-chart.html

[kinda]

Thats awesome! Thank you. I've never heard of/used the chart command. Thank you for your help!

[woodcock]

See also xyseries (and it's opposite, untable ).

[woodcock]

If in a dashboard, you create a control where the users selects from a list and this selection sets a token that the searches inside of the panels can reference. Is this what you mean?

[kinda]

A little,

I'm trying to get the x axis populated automatically with preset metadata that's available in my dashboard.

[woodcock]

Start with this app:
https://splunkbase.splunk.com/app/1603/

I can help more if you can be much more specific.

[kinda]

I don't know if this is specific enough,

I have meta.hardware that has a list of devices. I would like to list those devices labeled in meta.hardware on the x axis without the need for hard coding those specific devices.

[kinda]

I don't know if this is important, but meta.hardware is listed as an 'interesting field', I don't know if I could somehow use that to my advantage