I have different host types (like SC, RC and etc) and its different version(18.1, 19, 19.1 and etc). I am trying to display host types in Y axis and respective Version in X axis. Tried using stats command but couldn't get what i want. Your thoughts pls?
Hello @jayachandrank,
Can you use chart
instead of stats
? Something like...
| chart count by host_types, version
Replace host_types with the field you want to display on Y-axis and version with the field you want to display on X-axis. Replace count by whatsoever operation you want.
Hope this helps!!!
You need the contingency
command:
https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Contingency
@jayachandrank would it be possible to add a mock screenshot to your question? Also post what is your current query and output.
I think you do want chart but you have to do the OVER and BY splitting
| chart count over version by types
Hello @jayachandrank,
Can you use chart
instead of stats
? Something like...
| chart count by host_types, version
Replace host_types with the field you want to display on Y-axis and version with the field you want to display on X-axis. Replace count by whatsoever operation you want.
Hope this helps!!!