Splunk Search

Timechart stats

noman377
Explorer

I have simple search:   index=xyz  logLevel IN (ERROR, INFO)
How do I plot two different color in a timespan chart?
See attached sample timespan chart. Ideally, I want to show red for error and green for info on the same time span chart. 

Labels (2)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| timechart count by logLevel

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| timechart count by logLevel
0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...