Dashboards & Visualizations

How to combine two bar graph panels into one?

pavanae
Builder

I have a query 1 as follows

My_Query1 | stats count by field_A

In which It displays the result as follows in the bar graph with count on x-axis and field_A values on Y-axis

alt text

Now I have another query as follows

My_Query2..... | chart count by field_A, field_B

In which it displays the result as follows in a bar graph

alt text

Here field_A is same on both the queries

Now how to modify my query to combine both the searches and display the a single bar graph like the query_1's dashboard but it should also contains the color slices that have for Query_2 dashboard.

What I am trying to say that I only need one dashboard panel which covers both the above panels but instead of having a query_2 panel. I want to see those color slices on query_1 panel

0 Karma
1 Solution

niketn
Legend

@pavanae, it still seems to be confusing. Do you want just stacked bar chart instead of stacked 100%?

From Splunk UI Edit Panel > Format > General > Stack Mode > Choose stacked instead of stacked100

https://docs.splunk.com/Splexicon:Stackmode

If this is not what you want, can you share a mock screenshot of desired output?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@pavanae, it still seems to be confusing. Do you want just stacked bar chart instead of stacked 100%?

From Splunk UI Edit Panel > Format > General > Stack Mode > Choose stacked instead of stacked100

https://docs.splunk.com/Splexicon:Stackmode

If this is not what you want, can you share a mock screenshot of desired output?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

pavanae
Builder

Thanks @niketnilay. That's what I'm looking for. Thanks again.

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

@Pavanae please mark the answer as accepted if this answered your question 🙂

0 Karma

cmerriman
Super Champion

Can you provide a sample output of what you want the chart to look like?

0 Karma

pavanae
Builder

Thanks for the response @cmerriman. As you can see on by second panel picture you can see the color partitions(3 different field values) of field_B for each field_A value in a 100% bar graph format. Instead I want to see the same partions on my first picture. Imagine my first picture with 2nd picture color partitions but here I want to see the same uneven bar graph lines with the 3 partitions.

Sorry If its still confusing.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...