There is a complicated requirement for me, the splunk beginner. Hope you can give me some advice. The splunk version: 9.0.2303.201 Since there are a lot of logs(events) that meet my search requirement, I want to generate a time chart with those logs.  I want to group those logs by a specific field named "field1": For events in group A, their "field1" value is unique when compared with all other events; For events in group B, their "field1" value has been repeated once when compared with other events, which means when I search the value of "field1"(group B),  it will return two events. Based on this premise,  I want to count the event that happened times of both two groups, and display them in a timeline(time chart), what can I do? ... View more