I am new to Splunk, so this question might be straight forward! I am looking to create a stacked chart by day.
This is the search that worked for 1 column, I am looking to add many more columns in addition to Mobile, i.e. 720P, 1080P. So the strings are OutputProfile-720P, OutputProfile-1080P. What is the best way to create Time chart with 3 columns and then create a stacked bar chart.
"OutputProfile-Mobile" NOT "Failed" | timechart count(host) as "Mobile"
Thanks very much for your help!
Chintu
... View more