how to showcase IP usage on multiple network in one chart

[#1]

Hello,

Im trying to create a report to show how many users are in the office and  I've been using the dhcpv4 usage trend template. I am trying have a different line for each network I filtered  in the chart but no luck. 

I think if we can specify in the network in the code it could work but can't find the right syntax

something like this: 

| timechart bins=100 sum(dynamic_hosts) AND x.x.x.x/x as network1, sum(dynamic_hosts) AND x.x.x.x/x as network2,

not sure if this is even possible but I will take any help.

 

[#2]

sourcetype=ib:dhcp:network index=ib_dhcp | eval dedup_key=view."/".address."/".cidr | dedup dedup_key | msservers ms_servers | sort 0 -num(dhcp_utilization) | eval Free=address_total-dhcp_hosts | rename timestamp as Timestamp, view as "Network View", address as Network, cidr as CIDR, dhcp_utilization as "DHCPv4 Utilization %", ranges as Ranges, address_total as Provisioned, dhcp_hosts as Used, static_hosts as Static, dynamic_hosts as Dynamic | table Timestamp, "Network View", Network, CIDR, "DHCPv4 Utilization %", Ranges, Provisioned, Dynamic, Static, Free, Used

Hi David, this may be what you are looking for.

[#3]

Hi,

Did this work? Verified?