Dashboards & Visualizations

How to combine two bar graph panels into one?

pavanae
Builder

I have a query 1 as follows

My_Query1 | stats count by field_A

In which It displays the result as follows in the bar graph with count on x-axis and field_A values on Y-axis

alt text

Now I have another query as follows

My_Query2..... | chart count by field_A, field_B

In which it displays the result as follows in a bar graph

alt text

Here field_A is same on both the queries

Now how to modify my query to combine both the searches and display the a single bar graph like the query_1's dashboard but it should also contains the color slices that have for Query_2 dashboard.

What I am trying to say that I only need one dashboard panel which covers both the above panels but instead of having a query_2 panel. I want to see those color slices on query_1 panel

0 Karma
1 Solution

niketn
Legend

@pavanae, it still seems to be confusing. Do you want just stacked bar chart instead of stacked 100%?

From Splunk UI Edit Panel > Format > General > Stack Mode > Choose stacked instead of stacked100

https://docs.splunk.com/Splexicon:Stackmode

If this is not what you want, can you share a mock screenshot of desired output?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@pavanae, it still seems to be confusing. Do you want just stacked bar chart instead of stacked 100%?

From Splunk UI Edit Panel > Format > General > Stack Mode > Choose stacked instead of stacked100

https://docs.splunk.com/Splexicon:Stackmode

If this is not what you want, can you share a mock screenshot of desired output?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

pavanae
Builder

Thanks @niketnilay. That's what I'm looking for. Thanks again.

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

@Pavanae please mark the answer as accepted if this answered your question 🙂

0 Karma

cmerriman
Super Champion

Can you provide a sample output of what you want the chart to look like?

0 Karma

pavanae
Builder

Thanks for the response @cmerriman. As you can see on by second panel picture you can see the color partitions(3 different field values) of field_B for each field_A value in a 100% bar graph format. Instead I want to see the same partions on my first picture. Imagine my first picture with 2nd picture color partitions but here I want to see the same uneven bar graph lines with the 3 partitions.

Sorry If its still confusing.

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...