Splunk Search

splunk query for chart overlay

jasklee
Engager

Is there any splunk query to combine to types of chart into 1?
example

timechart count by owner
timechart count by status

Tags (1)
0 Karma

linu1988
Champion

try

|timechart count(status) as status,count(owner) as owner

Thanks

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>