02-15-2025 05:24 AM - edited 02-15-2025 05:30 AM
I am creating a stacked bar chart that shows the number of alerts per data source per day.
Is it possible to display the data source in the displayed graph?
The stacked bar I created shows the time.
※Whatever I select for the X-axis will be displayed in a stacked graph.
A reference image is attached.
02-19-2025 07:45 AM
Hello @Hisashi_Abe ,
Thanks for reaching out on LiveCommunity!
Can you please run below query and let me know if you are looking for the provided result.
dataset = alerts | fields _time , alert_source , alert_name
|bin _time span = 1d
|comp count(alert_name ) as alert_count by alert_source , _time
|sort desc _time
| view graph type = column subtype = grouped xaxis = alert_source yaxis = alert_count
If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
