Why is my chart that is grouped by values not showing up in visualization?

[saravana22]

Hi Experts,

my SPL query,

...| eval elapse_range=case(
TOTAL_ELAPSE>0 AND TOTAL_ELAPSE<4, "Green",
TOTAL_ELAPSE>4 AND TOTAL_ELAPSE<8, "Yellow",
TOTAL_ELAPSE>8, "Red")
|chart values(TOTAL_ELAPSE) as TOTAL_ELAPSE over JOBID by elapse_range

Statistics table:

JOBID                         Green                 Red                    Yellow SZ146BKP                                              8.2 SZ11BKP                                                 8.6                         7.9 SZ16BKP                                                 8.6 SZSWTCNT                                            8.7 SZ00D                          T39                                                                     9.5                                                                     9.8                                                                     9.9 SZ24                                                                    10.6                                                                     11.0 SZ07                                  1.7                12.7 SZ04                                                        59.6 SZ22                                                                    66.6                                                                     69.2

The grouped by values i.e Highlighted Values coming in statistical table but not showing in chart Chart not showing the values 66.6, 69.2 etc

[saravana22]

Thank you @ITWhisperer  for the quick help. Here i need show all the values in graph instead of Max.

example : If job SZ22 have 66.6 & 69.2, i need to show both in the chart. Can you please help!!!


Thank you in advance

[ITWhisperer]

What do you imagine such a chart would look like? Does the line join to 66.6 and then up to 69.2, or 69.2 and then down to 66.6? What about when there are three values? As you can see, there is no easy way to specify what this line would look like.

Perhaps you need two lines for each elapse_range e.g.  Green_max, Green_min etc.?

[ITWhisperer · Accepted solution]

Line chart cannot (easily) display multiple values for each x-axis value. You could try

| chart max(TOTAL_ELAPSE) as TOTAL_ELAPSE over JOBID by elapse_range