This seems similar to http://answers.splunk.com/answers/108423/stacked-chart-to-show-how-many-calls-where-assigned-to-the-..., but I can't seem to apply it in practice.
I have 3 values:
stats sum (Requests)
hourOfRequest (date_hour essentially)
host
I want to see a stacked chart, where each column is a host, and the sum(request) per hourOfRequest are the series within each column. I've tried a few different methods, but can't seem to get it.
Got it! Now that I understand chart commands better. Take out stats, just use charts and:
chart sum(requests) over host by hourOfRequest
Got it! Now that I understand chart commands better. Take out stats, just use charts and:
chart sum(requests) over host by hourOfRequest