I'm trying to create a visual dashboard  (specifically a column graph or bar chart) using  index=guardium ruleDesc="OS Command Injection" | stats count by dbUser, DBName, serviceName, sql   This is the graph I get: I would like to group these fields into categories on the chart where one part would show count of 1-5 then 6-10...and so on.  Then I could drill down a specific bar within the count group to view the fields for that bar in a table format.  How would I go about doing this.  I am new to splunk and have been stuck finding the best way to represent this data.  I was given this search statement and was told to make a visual dashboard of it. ... View more