Splunk Search

Timechart stats

noman377
Explorer

I have simple search:   index=xyz  logLevel IN (ERROR, INFO)
How do I plot two different color in a timespan chart?
See attached sample timespan chart. Ideally, I want to show red for error and green for info on the same time span chart. 

Labels (2)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| timechart count by logLevel

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| timechart count by logLevel
0 Karma
Get Updates on the Splunk Community!

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...