Hi valentinv,
If you want to show trend over time, you can use the timechart command in your query. For example, the following search displays product purchases over time.
sourcetype=access_* action=purchase | timechart count by product
So, basically you can timechart your values (each has a timestamp I presume) and visualize them using a line chart to see the trend.
For more details: http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Timechart?r=searchtip
Hope it helps. Thanks!
Hunter
... View more