Dashboards & Visualizations

Question about Column Charts

Moreilly97
Path Finder

Thanks in advance for any answers.

So I have three fields; ticketNumber , group and TimeBlock

Every ticketNumber has a group it is assigned to and a TimeBlock that it falls into for example; Ticket02 with group IT2 and assigned within 1Hour.

I want to first groups the Tickets with their groups, and then chart the groups against the TimeBlocks

So the x axis would be 1Hour 2Hour 3Hour etc and they would have the groups and when hovered over it displays the amount of tickets.

0 Karma
1 Solution

somesoni2
Revered Legend

Try this

your current search giving fields ticketNumber , group and TimeBlock
| chart count(ticketNumber) over TimeBlock by group

View solution in original post

0 Karma

somesoni2
Revered Legend

Try this

your current search giving fields ticketNumber , group and TimeBlock
| chart count(ticketNumber) over TimeBlock by group
0 Karma

Moreilly97
Path Finder

Thank you so much for the quick reply and solution ! Ive been trying to use

| chart count(ticketNumber) by group over TimeBlock

And I was wondering why it wasnt working. Thanks again.

0 Karma
Get Updates on the Splunk Community!

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...