Data for charts
To build any chart, start with a transforming search that generates one or more data series.
A series is a sequence of related data points. These points can be plotted on a chart. For example, each line in a line chart shows one series.
When you run a transforming search, select the Statistics tab. Review the statistics table to see the series generated. After the first column, each additional column represents a series. A single series search generates two columns. A multiple series search generates three or more columns.
Different chart types are optimized to visualize one or more data series.
|Chart name||Optimized for single series?||Optimized for multiple series?||Notes|
|Pie||Yes||No||Pie charts can only render a single series.|
|Line||Yes||Yes||Typically, line charts are used for multiple series.|
|Area||No||Yes||Use an area chart to render multiple series.|
|Scatter||No||Yes||Scatter charts work best with two data series.|
|Bubble||No||Yes||Bubble charts work best with three data series.|
This documentation applies to the following versions of Splunk Cloud Platform™: 9.0.2209 (latest FedRAMP release), 8.2.2109, 8.2.2106, 8.2.2107, 8.2.2111, 8.2.2112, 8.2.2201, 8.2.2202, 8.2.2203, 9.0.2205, 9.0.2208