My Splunk Objects looks like this:-
Obj1:-
{
time: x1
type:"info"
data: {
0:12
1:13
2:12
3:17
}
}
Obj2:-
{
time: x1
type:"info"
data: {
4:16
5:12
6:14
7:19
}
}
I want to draw a timechart with key as data.* and value as value(data.*)
I tried using this query
type=info | timechart values(data.0) as 0, values(data.1) as 1, values(data.2) as 2, values(data.3) as 3, values(data.4) as 4, values(data.5) as 5, values(data.6) as 6, values(data.7) as 7
and this worked fine for me.
But I want to extend this query to number 'n' and avoid having multiple values(attrs.x) as x
Is there a simpler way to do it?
@adr2609,
timechart values(data.*) as *
@adr2609,
timechart values(data.*) as *