Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to get a Line Chart with 3 Split by Clauses?

$
0
0
I have a set of lab samples that have a Percent value measured in 3 different locations across the sample, identified as A, B, and C. Each sample is also associated with a different style. My end goal is to have a line chart with SampleID on the x-axis and Pct on the y-axis with a set 3 different data series for each of the locations A, B, and C for each style. (So Style1PctA, Style1PctB, Style1PctC, Style2PctA, Style2PctB, Style2PctC,...) Then, I want to use Trellis view to separate by Style, so I'd have a graph with the series for A, B, and C for each Style. My search is as follows: | stats avg(Pct) as Pct by SampleID, Location, Style which of course gives me a table that contains the following fields: SampleID, Location, Style, Pct. This results in a graph with 3 series: Location, Style, and Pct, but Pct is the only one that shows up on the graph and there is no differentiation by Location or Style. From there, I can Trellis by Style, but there is no differentiation by Location. I know that I can accomplish this by doing a separate search (or using a token) to filter by Style before graphing, but then I have to hard-code each of my Styles into either an input on a dashboard, or a series of graphs. | search Style=123 | stats avg(Pct) as Pct by SampleID, Location Is there a better way to accomplish this?

Viewing all articles
Browse latest Browse all 47296

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>