Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Multiple fields in one chart

$
0
0
Hi, I struggling to create chart, which will be with multiple field values (max,avg and min pauses) + need to see months (January, February, March etc.) in X-Axis What I need to change here? `| eval fields=split(_raw," ") | eval pauses=mvindex(fields,8) | eventstats max(pauses) as Max_pause | eventstats avg(pauses) as Avg_pause | eventstats min(pauses) as Min_pause | table Max_pause Avg_pause Min_pause`

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>