This command: source="splunk_test1.txt" sourcetype="temp" | table x, y | sort y | stats sum(x) as x1 by y | sort y treats x1 as integer, but the plot is with x and y axis interchanged. When I do this: source="splunk_test1.txt" sourcetype="temp" | table x, y | sort y | stats sum(x) as x1 by y | sort y | table x1, y I get the same plot as the one in the question. It looks like, with repeating x-axis values (to generate a vertical line), the plotting routine changes the data type of the x-axis values. I also tried this command to avoid repeating x-axis values: source="splunk_test1.txt" sourcetype="temp" | table x, y | sort y | eval x = x+y Even with this, I get the similar plot as the one in question ... View more