Splunk Search

Timechart Overlay

Communicator

I have a dashboard with two different panels showing time chart for the number of events and avg size of those events in another chart.

Is there a way two show two different charts in one panel?

index = appWJS sourcetype=fs_notification | timechart count

index = aapWJS sourcetype=fs_notification |timechart avg(size)

Tags (2)
0 Karma
1 Solution

Esteemed Legend

Like this:

index = appWJS sourcetype=fs_notification | timechart count avg(size)

View solution in original post

0 Karma

Esteemed Legend

Like this:

index = appWJS sourcetype=fs_notification | timechart count avg(size)

View solution in original post

0 Karma