Splunk Search

| chart avg(jm*) over Date by Release

wokwok1
New Member

hey,

is it possible to create a chart based on an unknown number of columns? For each release I have multiple fields/metrics. But I don't want to hard-code them in my splunk query. I just want to chart all of them so you can see any regression between two releases.

I can hard-code the metrics:
| cHART avg(jmA),avg(jmB), avg(jmC) over Date by Release

but seems like I can't do:
| cHART avg(jm) over Date by Release*

Thank you so much.

0 Karma

Ayn
Legend

Isn't it the jm* values you want to put a wildcard on? Just do

| chart avg(jm*) over Date by Release
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...