Splunk Search

| chart avg(jm*) over Date by Release

New Member


is it possible to create a chart based on an unknown number of columns? For each release I have multiple fields/metrics. But I don't want to hard-code them in my splunk query. I just want to chart all of them so you can see any regression between two releases.

I can hard-code the metrics:
| cHART avg(jmA),avg(jmB), avg(jmC) over Date by Release

but seems like I can't do:
| cHART avg(jm) over Date by Release*

Thank you so much.

0 Karma


Isn't it the jm* values you want to put a wildcard on? Just do

| chart avg(jm*) over Date by Release