Hello Splunkers, I would like to create a timechart for status. The data only comes when there's an update, so generally, one event when the ticket opens, and one when it closes. How should I approach visualising this? Data ~ Problem ID Start Time End Time ManagementZone 10 09:00 null CAT 11 09:00 null DOG 10 09:00 09:30 CAT 12 10:00 null CAT 13 10:00 null DOG 11 09:00 11:30 DOG 12 10:00 11:30 CAT 13 10:00 12:00 DOG 14 15:00 null CAT 15 15:30 null DOG Desired Outcome 08:00 09:00 10:00 11:00 12:00 13:00 14:00 15:00 16:00 17:00 CAT 0 1 1 1 0 0 0 1 1 1 DOG 0 1 2 2 0 0 0 0 1 1 Thank you all in advance.
... View more