topic Re: Splunk Bar Chart Colors in Splunk Dev

Splunk Bar Chart Colors

harishfysx — Tue, 19 Mar 2024 20:17:24 GMT

Hi I am fairly new to Splunk , thank you in advance if you can help me...:)

My goal is to log the service response duration each time a ESService is called. The ESService value can be anything. In the table format below I am able to see which service is being hit and the duration .

But in the visualization section, all the events showing the same color, Is there anyway to show different color for each ESService . For example , when ESBusinessrep blue, for ESPerson red etc.(dynamically there can be N number of service types). And when I hover on the bars they are showing time, and duration values only not the ESService. How to achieve this?

Re: Splunk Bar Chart Colors

bowesmana — Wed, 20 Mar 2024 00:06:06 GMT

A bar chart will give you a different colour for each series, so you would need to do something like

| chart max(duration) over _time by ESService

Re: Splunk Bar Chart Colors

harishfysx — Wed, 20 Mar 2024 13:44:58 GMT

Thank you bowesmana!.

Really appreciate your help on this.

now I am greedy....

Can I get query to get Max, Average, Minimum of each ESService?

Re: Splunk Bar Chart Colors

harishfysx — Wed, 20 Mar 2024 14:17:34 GMT

transaction transactionId startswith="step=Before" endswith="step=After" | stats max(duration) as MaxRespTime avg(duration) as AvgRespTime min(duration) as MinRespTime by ESService

This should do it .