Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to create cumulative chart separated by a field

$
0
0
I need to create a chart, looking like the example I added. the chart needs to show the cumulative number of tasks opened until the date, but separated by "Severity"., ![alt text][1] the following code does give me a cumulative count by time of the tasks but not separating by the field "Severity". index=clearquest "Root Project"=IPA_4* "Project Name"=IPA_4* ("Task Type"="Enhancement A*" OR "Task Type"=Defe* OR "Task Type"=Doc*) "Resolution"=* "Severity"=* "Task ID"=* | dedup "Task ID" | reverse | timechart span=1w count("Task ID") AS sum_of_tasks_per_week | streamstats sum(sum_of_tasks_per_week) AS TI_accumulate ![alt text][2] how do I create that separation that I need like the graph I added? [1]: /storage/temp/189188-example-of-the-next-report.png [2]: /storage/temp/189189-capture.png

Viewing all articles
Browse latest Browse all 47296

Trending Articles