I have two values
a) The time when a breach occurs.
b) The amount of memory consumed during the memory breach.
I want X axis to show a) and Y axis to show b)
Is is possible in Splunk to draw such chart?
You can use chart command :
(your search)|chart values(fgcd1) over _time
You can use chart command :
(your search)|chart values(fgcd1) over _time
Can you post some sample values?
source="mem_hoarder" | transaction host startswith="motorBall" maxevents=6 | rex "Breached_For,[^,]+,\s+(?[^\s]+)" | eval Time=strftime(_time,"%Y-%m-%d %H:%M:%S") | eval fgcd1= round(fgcd,2)
Time >> in X axis (sample value _time)
fgcd1 >>in Y axis (sample values 122, 34, 133, 24 ...etc....)