Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

How do you chart a single data field?

$
0
0

I'm trying to just chart the NTP offsets from the Loopstats file. Here is a sample of the data source:

Day   Seconds    Offset        Drift    Est.Error    Stability  Polling.Int

56639 6177.359   0.004032319   -25.301  0.001841655  0.117440   6
56639 6348.131   0.004225549   -25.258  0.001724064  0.110906   6
56639 6698.364   0.002325595   -25.210  0.001747019  0.105151   6
56639 6877.378   -0.001154758  -25.222  0.002045648  0.098456   6
56639 7024.343   0.001006711   -25.213  0.002060481  0.092150   7
56639 7994.357   0.003429927   -25.164  0.002109237  0.087962   7      
56639 7998.387   0.003124573   -25.164  0.001975962  0.082281   7

So I've extracted each of the fields accordingly and all I want to do is chart the Offsets, which is the 3rd data field in the sample above. I tried: <source> | chart sum(offset) by seconds, but that doesn't yield a nice line graph, which is my goal. Any suggestions?


Viewing all articles
Browse latest Browse all 13053

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>