I can make mulitple summed time series.
source="splunk-source"
| timechart sum(figure) as figure by category
I can make a single cumulative summed time series.
source="splunk-source"
| timechart sum(figure) as figure
| streamstats sum(figure) as cumulative_figure
| timechart last(cumulative_figure)
But I can't make multiple cumulative summed time series.
I would appreciate some help with that.
... View more