I generated a line chart and am plotting on two fields: Time and ID, however, I want to see more than just these two fields. Is there a way to generate a chart so that each point on the line chart shows three field values: Time, ID, and Name?
Line charts are designed for plotting two values on a axis. If it makes sense, you can concatenate the ID and Name into one field and plot that over time.
<your search> | eval NameID=Name+":"+ID | timechart values(NameID)
Line charts are designed for plotting two values on a axis. If it makes sense, you can concatenate the ID and Name into one field and plot that over time.
<your search> | eval NameID=Name+":"+ID | timechart values(NameID)
Concatenation makes it look a little long and messy but should work fine. Thanks!