Splunk Search

How to plot a stacked column chart with TIME taken from data in a CSV file as the y-axis ?

harshal_chakran
Builder

Hi,
I have a csv file as shown below.

DATETIME  ACTIVITIES    TIME
1Jan      Activity1 0:02:00
1Jan    Activity2   2:45:00
1Jan    Activity3   0:00:05
1Jan    Activity4   0:00:01
1Jan    Activity5   3:00:00
1Jan    Activity6   1:15:00
1Jan    Activity7   0:30:00
1Jan    Activity8   0:00:30
1Jan    Activity9   0:30:00
1Jan    Activity10   0:10:00
1Jan    Activity11   0:50:00
1Jan    Activity12   0:03:00
2Jan    Activity1   0:01:18
2Jan    Activity2   1:23:08
2Jan    Activity3   0:00:05
2Jan    Activity4   0:00:00
2Jan    Activity5   2:49:53
2Jan    Activity6   1:02:41
2Jan    Activity7   0:29:33
2Jan    Activity8   0:00:14
2Jan    Activity9   1:09:34
2Jan    Activity10   0:02:47
2Jan    Activity11   0:46:03
2Jan    Activity12   0:02:01

I have converted the TIME column to Splunk's TIMEFORMAT, Then I was trying to plot a stacked chart with xyseries command like:
xyseries DATETIME ACTIVITIES TIME.

But its doesnt plots the graph as Splunk is not able to identify the TIME, and plot it.
This is how I want to display the result as following picture:
alt text

The Y axis labels should be with respect to time format.
Please Help..

Tags (4)
0 Karma

btt
Path Finder

Hi,
... |convert timeformat="%H:%M" ctime(TIME) AS c_TIME | xyseries DATETIME ACTIVITIES c_TIME

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...