index.foo host="foo" |.... eval foo...| xyseries servicefoo hostname count.....
In this above query, I can see two field values in bar chart (labels)..look like
1.Servicefoo : value
2. hostname: count's value & Host_name are showing in legend.
But I need all three value with field name in label while pointing the specific bar in bar chart. its should be like
1. Servicefoo: value,
2. count : value,
how to come up with above three value in label in bar chart.
Would it be possible for you to provide sample values for the three fields i.e.
servicefoo hostname count
xyseries service_foo host_name value
the last field in an xyseries is supposed to be the value being charted.
If that doesn't work, we might need more information. what data looks like before and after the xyseries. that command is finicky.
if we need to show 4 or more value in lable means, how can I?
this is for host cpu utilization. Need to show Process %, host name,application running and counts, time.
this is for host cpu utilization. Need to show Process %, host name,application running and counts, time, while placing the pointer in bar chart
You can merge two fields into 1 using string concatenation in some and use that field for charting so that the label of concatenated field show 2 label values. Need full, actual search to give more accurate suggestions.