topic Re: help on average line in bar chart in Splunk Enterprise

help on average line in bar chart

jip31 — Thu, 30 Sep 2021 05:45:44 GMT

I want to display an average line in my bar chart

So I am doing this but instad a line it's a third bar chart which is displayed

how to add a line average instead a bar line

| timechart span=2h max(debut) as "Début de session", max(fin) as "Fin de session" | eventstats avg("Début de session") as Average | eval Average=round(Average,0)

Thanks

Re: help on average line in bar chart

ITWhisperer — Thu, 30 Sep 2021 08:07:28 GMT

You need to format the chart, specifically Chart Overlay

Re: help on average line in bar chart

jip31 — Thu, 30 Sep 2021 08:24:42 GMT

thanks it works

last question, I try to color the average line like the color of the field related to the avaerage but I dont reach...

<option name="charting.fieldColors">{"Average":EC240C, "Fin de session": EC240C}</option>

Re: help on average line in bar chart

ITWhisperer — Thu, 30 Sep 2021 09:04:37 GMT

Your average is from "Début de session" not "Fin de session" - is that why?

Re: help on average line in bar chart

jip31 — Thu, 30 Sep 2021 09:16:46 GMT

In my dash, I have 2 fields "Début de session" and "Fin de session" and I am doing 2 average, avg_deb and avg_fin

But I dont succeed to use the same color for avg_deb like for "Début de session" and same thing for avg_fin with "Fin de session"

Re: help on average line in bar chart

ITWhisperer — Thu, 30 Sep 2021 09:27:06 GMT

What part isn't working? Is it only colouring the average lines or none of them?

Re: help on average line in bar chart

jip31 — Thu, 30 Sep 2021 09:28:54 GMT

i dont succeed to colour the average lines