Related Answers
Download topic as PDF
Data for charts
To build any chart, start with a transforming search that generates one or more data series.
A series is a sequence of related data points. These points can be plotted on a chart. For example, each line in a line chart shows one series.
When you run a transforming search, select the Statistics tab. Review the statistics table to see the series generated. After the first column, each additional column represents a series. A single series search generates two columns. A multiple series search generates three or more columns.
Different chart types are optimized to visualize one or more data series.
| Chart name | Optimized for single series? | Optimized for multiple series? | Notes |
|---|---|---|---|
| Pie | Yes | No | Pie charts can only render a single series. |
| Bar | Yes | Yes | |
| Column | Yes | Yes | |
| Line | Yes | Yes | Typically, line charts are used for multiple series. |
| Area | No | Yes | Use an area chart to render multiple series. |
| Scatter | No | Yes | Scatter charts work best with two data series. |
| Bubble | No | Yes | Bubble charts work best with three data series. |
|
PREVIOUS Chart overview |
NEXT Pie chart |
This documentation applies to the following versions of Splunk® Enterprise: 6.5.0, 6.5.1, 6.5.1612 (Splunk Cloud only), 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.10, 7.0.9, 7.0.11
Feedback submitted, thanks!