STACKED area chart??

[a277437]

Will Splunk do a stacked area chart?  I'm able to get an area chart, but it's not 'stacked' (so each proxy totals to an aggregate).  I'm wondering if splunk can even do that?  I looked at the documentation and it appeared that it could, so I'm hoping maybe I'm just doing something wrong.  Under the 'Visualization"

index = "myindex"| bin _time span=5m
| stats sum(cs_bytes) as Bytes by proxy_server _time
| eval Kbps=(((Bytes*8)/1000)/300)
| timechart span=5m list(Kbps) by proxy_server

[a277437]

Continuing from above...  "Under the Visualization" I selected the area chart. 

Thank you!

[ITWhisperer · Accepted solution]

Change the format of the area chart to stacked

ITWhisperer_0-1628055268921.png

[a277437]

That's it!!!  Thank you!