topic Re: Does Splunk have a Stepped Line Graph Visualisation in Dashboards & Visualizations

Does Splunk have a Stepped Line Graph Visualisation

pjAstroMan — Thu, 29 Apr 2021 15:09:23 GMT

Hi there, I am in the process of evaluating Splunk as a possible replacement to our existing data historian. Our users require a Stepped Line Graph for trending purposes rather than the conventional line graph. Is it possible to provide a Stepped Line Graph visualistion in Splunk?

Kind Regards

Paul J.

Re: Does Splunk have a Stepped Line Graph Visualisation

tscroggins — Sat, 01 May 2021 16:09:00 GMT

@pjAstroMan

Not directly, but you can group data points by series and use the xyseries command to plot steps:

foo.csv

series,x,y
a,0,1
a,1,1
a,2,1
b,2,2
b,3,2
b,4,2
c,4,3
c,5,3
c,6,3

| inputlookup foo.csv
| xyseries x series y

x	a	b	c
0	1
1	1
2	1	2
3		2
4		2	3
5			3
6			3

tscroggins_0-1619885196636.png

Splunk also provides an interface to develop custom visualizations: https://dev.splunk.com/enterprise/docs/developapps/visualizedata/displaydataview/splunkplatformcustom/

Re: Does Splunk have a Stepped Line Graph Visualisation

pjAstroMan — Mon, 03 May 2021 09:03:14 GMT

Thanks for the feedback, unfortunately, whilst this would work for specifically manipulated data content, in my particular case the stepped chart needs to be generated from a real-time data feed.

Kind Regards

Paul.

Re: Does Splunk have a Stepped Line Graph Visualisation

tscroggins — Mon, 03 May 2021 11:21:22 GMT

@pjAstroMan

I used a contrived example, but streaming data can be modified into a similar structure using SPL. Search-time analysis and transformation is Splunk's core value proposition.