https://community.splunk.com/t5/Dashboards-Visualizations/Add-additional-ad-hoc-data-one-time-input-to-create-graphs-in/m-p/391315#M25672 <P>How about you put this data in a lookup file and upload to Splunk? (you should've access to create private lookups) You can use a text input as well but it will have limited input string length and there would a further restriction of browser's URL length. For reference, here is what your search would look like if using text input to get that colon/pipe separate data</P> <PRE><CODE>| gentimes start=-1 | eval temp="$YourToken$" | table temp | makemv temp delim="|" | mvexpand temp | rex field=temp "(?&lt;Date&gt;.+)\:(?&lt;count&gt;.+)" | eval _time=strptime(Date,"%m.%d.%Y") | timechart span=1d sum(count) as count </CODE></PRE> Thu, 21 Jun 2018 15:44:01 GMT somesoni2 2018-06-21T15:44:01Z https://community.splunk.com/t5/Dashboards-Visualizations/Add-additional-ad-hoc-data-one-time-input-to-create-graphs-in/m-p/391314#M25671 <P>Hello Guys,</P> <P>I am splunk end user and have limited access to splunk app UI, I am quite new to this and would require your help.<BR /> Our admin team gets the data loaded into our splunk app from our servers, from that data I have created dashboard which has graphs for various things.</P> <P>But the log does not contain certain information for which I want to create graph so would like to supply this new raw data manually. I searched online and can see this can be done by adding/installing add-ons but as I said I have limited access.</P> <P>Can anyone suggest how can I achieve same?<BR /> I came across Text input [tokens], is it possible to supply my data in some format in the text input box and then create a graph out of it. For example I have to create graph of some ticket count per day, I can supply data in below format and would like to create a bar chart showing ticket count per day.</P> <P>01.05.2018:3|02.05.2018:12|03.05.2018:21|04.05.2018:41|05.05.2018:12|06.05.2018:22|07.05.2018:51|08.05.2018:5</P> <P>Any help will be much appreciated.</P> Thu, 21 Jun 2018 13:26:56 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Add-additional-ad-hoc-data-one-time-input-to-create-graphs-in/m-p/391314#M25671 abhivar3 2018-06-21T13:26:56Z https://community.splunk.com/t5/Dashboards-Visualizations/Add-additional-ad-hoc-data-one-time-input-to-create-graphs-in/m-p/391315#M25672 <P>How about you put this data in a lookup file and upload to Splunk? (you should've access to create private lookups) You can use a text input as well but it will have limited input string length and there would a further restriction of browser's URL length. For reference, here is what your search would look like if using text input to get that colon/pipe separate data</P> <PRE><CODE>| gentimes start=-1 | eval temp="$YourToken$" | table temp | makemv temp delim="|" | mvexpand temp | rex field=temp "(?&lt;Date&gt;.+)\:(?&lt;count&gt;.+)" | eval _time=strptime(Date,"%m.%d.%Y") | timechart span=1d sum(count) as count </CODE></PRE> Thu, 21 Jun 2018 15:44:01 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Add-additional-ad-hoc-data-one-time-input-to-create-graphs-in/m-p/391315#M25672 somesoni2 2018-06-21T15:44:01Z https://community.splunk.com/t5/Dashboards-Visualizations/Add-additional-ad-hoc-data-one-time-input-to-create-graphs-in/m-p/391316#M25673 <P>Thanks somesoni2 for your suggestion, let me try both of these out. Will come back to you with updates.</P> Fri, 22 Jun 2018 07:40:13 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Add-additional-ad-hoc-data-one-time-input-to-create-graphs-in/m-p/391316#M25673 abhivar3 2018-06-22T07:40:13Z