Splunk Search

chart over date for metrics

xvxt006
Contributor

Hi,

i have metrics that i want to track them as stacked over period of time (day)

| chart over Date by measure

This is not giving any results. Do you know why?

Tags (1)
0 Karma

xvxt006
Contributor

never mind i have used column chart. Thanks for your help

0 Karma

xvxt006
Contributor

Thanks i got this. But the stacked bar chart is horizontal meaning bars are going in horizontal. Can i make them vertical?

0 Karma

tmarlette
Motivator

Have you tried the 'timechart' function of splunk? Check it out on the documentation, and it may help.

timechart

somesoni2
Revered Legend

You need to specify the aggregator or function with field name on which that function to be applied. E.g. chart avg(count) over Date by measure. What fields are available before chart command?

Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...