Stacked Chart to show how many calls where assigned to the Assignee by the Queuemanagers

[NielSplunk]

I am pretty new to Splunk, but pretty hooked already 🙂
After creating some handy reports, I now have a hard time creating a stacked chart telling me who assigned calls to the assignees. I searched manuals as-well as the answers section, but was not able to find a working solution.

I created a search line which gives me the needed data:

 CallUpdateAction="assigned" QueueMan="" AND Analyst=""

The question now is, how do I get the data stacked like the image (not enough Karma) at my https dropbox link dl.dropboxusercontent.com/u/20804642/Splunk_Forum/Call_Assignment_Chart.png

I hope you can give me some directions on this matter!

Thanks,

Niels

[polymorphic · Accepted solution]

This should work:

CallUpdateAction="assigned" | chart count over Analyst by QueueMan

[NielSplunk]

Fulfilled with shame I say thank you!