Graph multiple searches in one graph

Comments

1 comment

  • Avatar
    Kevin Keech

    Hi Gustav,

    In most cases to get the proper stacking chart you will need to use the transpose operation as part of your query to set the rows and columns for the chart and then you can use the "stacking option for the chart. More information on using Transpose  can be found in the online help.

    Example 1 - Count by Name per Level

    | keyvalue "Name","Level" | count by Level, Name | transpose row Level column Name

    Sample Result:

    |
     
    | Name1
    | Name2
    |
    |
    Warn
    | 5
    | 6
    |
    |
    Error
    | 2
    | 3
    |
    |
    Info
    | 15
    | 20
    |

     

    Example 2 - Count by Level per Timeslice

    timeslice by 1h | keyvalue "Name","Level" | count by _timeslice, Level | transpose row _timeslice column Level

    Sample Result

    |
     
    | Warn
    | Error
    | Info
    |
    |
    12:00
    | 10
    | 5
    | 12
    |
    |
    13:00
    | 5
    | 2
    | 10
    |
    |
    14:00
    | 6
    | 5
    | 2
    |

     

    Once you have the proper results the Stacking options are available within the bar chart properties. These properties are found in the Aggregate tab by:

    1.Selecting either the vertical or horizontal Bar Chart option

    1. Clicking on the Chart options icon. 

    2. Select "Change Properties" from the drop down.

    3. Select "Normal" under the "Stacking" options for the chart.

     

    Please let us know if this does not get you what you were looking for.

    -Kevin

    0
    Comment actions Permalink

Please sign in to leave a comment.