Dashboards & Visualizations

How to create a bi-directional bar chart?

rajeshjlnt
Path Finder

I would like to create a bi-directional bar chart. I have 2 fields monthly closed and monthly created tickets, I want to plot a bar chart with 1 field above X axis and another below x axis. I tired all options available in Chart overlay in UI. Also searched for xml code, but with no success.
Can anybody provide some pointers?

Tags (1)
0 Karma
1 Solution

to4kawa
Ultra Champion
| gentimes start=01/01/2019 
| rename starttime as _time 
| timechart span=1month count 
| eval time = strftime(_time ,"%b %Y") 
| table time count
| eval count2=count * -1

Visualization >> Bar Chart
How about this?

View solution in original post

0 Karma

to4kawa
Ultra Champion
| gentimes start=01/01/2019 
| rename starttime as _time 
| timechart span=1month count 
| eval time = strftime(_time ,"%b %Y") 
| table time count
| eval count2=count * -1

Visualization >> Bar Chart
How about this?

0 Karma

rajeshjlnt
Path Finder

This is how i want the chart to look but bars below x axis show come with positive numbers :).
My data is created tickets vs closed tickets, so both of them will positive numbers.

0 Karma

to4kawa
Ultra Champion

default Bar Chart can't display strict bi-directional bar chart
In practice, the X axis is negative, but it is displayed.

what's your query?
so both of them will positive numbers.
I see, Finally you can make either one negative.

0 Karma

rajeshjlnt
Path Finder

I agree, i got it working by converting on field to negative number. Thank you for the help @to4kawa

0 Karma

to4kawa
Ultra Champion

OK, I see. Happy Splunking.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...