Reporting

How can I create line/area charts over fields other than _time using Pivot?

frank_zhang
Path Finder

Hi,

I'm learning Splunk6 pivot features, and noticed when I choose Line Chart or Area Chart in Pivot editor, X-Axis is hardcoded with "Time". Is there any reason that it doesn't allow to create line/area chart over fields other than time? Is there any workaround besides using SPL?

Thanks.

Tags (1)

gauldridge
Path Finder

I can't say for sure but it might be that line and area charts are well suited for showing trends over time. However, if your goal is to create a dashboard panel using Pivot, you can create a bar or column graph in Pivot (which allows you to choose the X-axis field), save the search as a dashboard panel, and then change the visualization to line/area using the panel editor in the dashboard.

frank_zhang
Path Finder

Thanks, I think this workaround solved my problem.

0 Karma

felipetesta
Path Finder

Even in 6.2.2 the Line Chart in Pivot doesn't accept a custom X-axis field. The solution by gauldridge worked for me too. It is still a loooong way to get a multi-day overlapped chart, but at least it is now possible with pivots.

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...