Scatter Chart is suitable for numerical expression on the X axis, not suitable for expressing rich time. Therefore, I recommend using a Line Chart to try it. １． Insert Null under each row of your table. Example: <base search> | stats values(Y_Value) as Y_Value by _time,Status | eval {Status}=Y_Value | append [ search <base search> | stats values(Y_Value) as Y_Value by _time,Status | eval Y_Value =null ] | sort 0 _time,Status | fields - Y_Value ,Status ２． Set the graph as follows. Graph: Line Chart Setting: format> General> Null Values> select [Gaps] ... View more

Scatter Chart is suitable for numerical expression on the X axis, not suitable for expressing rich time. Therefore, I recommend using a Line Chart to try it. Insert Null under each row of your table. Example： index="dotchart" source="DotChart.csv" sourcetype="csv" | stats values(MFT_fromFileBytes) as Bytes by _time,MFT_job_name | eval {MFT_job_name}=Bytes | append [ search index="dotchart" source="DotChart.csv" sourcetype="csv" | stats values(MFT_fromFileBytes) as Bytes by _time,MFT_job_name | eval Bytes=null ] | sort 0 _time,MFT_job_name | fields - Bytes,MFT_job_name ２. Set the graph as follows. Graph: Line Chart Setting: format> General> Null Values> select [Gaps] ... View more