Create a report from a custom chart

In this example, you create a report that charts which products were purchased over a period of time. This example uses the timechart command and chart options to create and customize a chart.

Prerequisite
This example requires the productName field from the Enabling field lookups section. You must complete all of those steps before continuing with this section.

Steps

1. Start a new search.
2. Run the following search.

   sourcetype=access_* | timechart count(eval(action="purchase")) by productName usenull="f" useother="f"

   This search uses the count() function to count the number of events that have the field action=purchase.

   The search also uses the usenull and useother arguments to ensure that the timechart command counts events that have a value for productName.

   The following table appears on the Statistics tab.

   

3. Click the Visualization tab.
4. In the Format drop-down list, format the X-Axis, Y-Axis, and Legend to produce the following Line chart.




This table lists the changes made to the chart.

Chart changes	Setting or value
Chart type	Line
X-Axis CustomTitle	Date
X-Axis Labels	-45 degree angle
Y-Axis Custom Title	Purchases
Y-Axis Interval	10
Legend Position	Top

5. Click Save As and select Report.
   
   
   
   1. In the Save Report As dialog box, for Title type Product Purchases over Time.
   2. For Description, type The number of purchases for each product.
   3. For Content, select Line Chart and Statistics Table.
   4. For Time Range Picker, keep the default setting Yes.
6. Click Save.
7. In the confirmation dialog box, click View to see the report.
   

Next step

Create a report from a sparkline chart

See also

timechart command in the Search Reference
Chart overview in Dashboards and Visualizations
About reports in the Reporting Manual