timechart grouping by list of IP's

[jmiddle2]

I need to create a line graph that shows 3 lines line 1: 127.0.0.1, line 2: internal subnets and line 3 external subnets that have access a page on my website (index.html). Does anyone know how I could group the clinetip's in such a way?

[martin_mueller]

I'm assuming you want a count of accesses by time, grouped by those three categories. Note, this is in pseudosplunk (trademark!).

some search grabbing one event per access to the relevant page | eval traffic_category = "local", "internal", or "external" depending on IP | timechart count by category

[jkat54]

You need to provide us with example data from your source.