<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: trellis chart showing the average time spent on a website in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604594#M49688</link>
    <description>&lt;P&gt;Thank you so much !!&lt;/P&gt;&lt;P&gt;I think I have the data now, but not sure how to&amp;nbsp; &lt;SPAN class=""&gt;Plot a trellis chart showing the average time for&lt;BR /&gt;each user session by browser &lt;/SPAN&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunkis0927_0-1657117463195.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/20417i47B73C144DBF20C4/image-size/medium?v=v2&amp;amp;px=400" role="button" title="splunkis0927_0-1657117463195.png" alt="splunkis0927_0-1657117463195.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunkis0927_1-1657117475162.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/20418i8AA49DC4B839DC93/image-size/medium?v=v2&amp;amp;px=400" role="button" title="splunkis0927_1-1657117475162.png" alt="splunkis0927_1-1657117475162.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 06 Jul 2022 14:25:47 GMT</pubDate>
    <dc:creator>splunkis0927</dc:creator>
    <dc:date>2022-07-06T14:25:47Z</dc:date>
    <item>
      <title>How to plot a trellis chart showing the average time spent on a website?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604518#M49684</link>
      <description>&lt;P&gt;Hi Community,&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class=""&gt;If i need Plot a trellis chart showing the average time spent on a website for each user session by browser&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class=""&gt;what's the best approach for this ?&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 07 Jul 2022 14:06:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604518#M49684</guid>
      <dc:creator>splunkis0927</dc:creator>
      <dc:date>2022-07-07T14:06:16Z</dc:date>
    </item>
    <item>
      <title>Re: trellis chart showing the average time spent on a website</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604536#M49685</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/247469"&gt;@splunkis0927&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;everything in Splunk is a search, so you have to create a search to have the result that you need, then you can choose the way to show your results (e.g. Trellis).&lt;/P&gt;&lt;P&gt;At first you have to find the results to aggregate and then aggregate them using some stremeing command like stats, something like this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;index=your_index sourcetype=your_sourcetype
| stats count BY session_id&lt;/LI-CODE&gt;&lt;P&gt;when you have the results as a table, you can use the gui fetures of Splunk to choose the chart you like and the Trellis.&lt;/P&gt;&lt;P&gt;But As I said, Trellins and chart type is a secondary issue: secondary for importance and scheduling.&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Wed, 06 Jul 2022 06:40:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604536#M49685</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2022-07-06T06:40:08Z</dc:date>
    </item>
    <item>
      <title>Re: trellis chart showing the average time spent on a website</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604543#M49686</link>
      <description>&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunkis0927_0-1657090774239.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/20410i465EE18DCC8FFA6C/image-size/medium?v=v2&amp;amp;px=400" role="button" title="splunkis0927_0-1657090774239.png" alt="splunkis0927_0-1657090774239.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;thanks for the help. here is the output I am going to try,&amp;nbsp; but atm i am not sure how to&amp;nbsp;&lt;SPAN&gt;aggregate&amp;nbsp;these browsers in a table&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunkis0927_1-1657090835235.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/20411i00CF4109D47D10FF/image-size/medium?v=v2&amp;amp;px=400" role="button" title="splunkis0927_1-1657090835235.png" alt="splunkis0927_1-1657090835235.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunkis0927_2-1657090871592.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/20412i9DC916F189264A35/image-size/medium?v=v2&amp;amp;px=400" role="button" title="splunkis0927_2-1657090871592.png" alt="splunkis0927_2-1657090871592.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 06 Jul 2022 07:02:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604543#M49686</guid>
      <dc:creator>splunkis0927</dc:creator>
      <dc:date>2022-07-06T07:02:35Z</dc:date>
    </item>
    <item>
      <title>Re: trellis chart showing the average time spent on a website</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604550#M49687</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/247469"&gt;@splunkis0927&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;the search you used is without sense!&lt;/P&gt;&lt;P&gt;you have to choose to use transaction ( I use it only when I don't have any other solution because it's a very slow command!) or stats.&lt;/P&gt;&lt;P&gt;In addition, you could also use timechart but only if you have one field for grouping (e.g. only JSESSIONID or clientip).&lt;/P&gt;&lt;P&gt;Then if you use _time in stats, you have also to use bin otherwise in this way you have groups that differs for a second.&lt;/P&gt;&lt;P&gt;try something like this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;index=main "http://www.buttercupgames"
| bin span=1h _time
| stats count BY SESSIONID clientip _time&lt;/LI-CODE&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Wed, 06 Jul 2022 07:57:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604550#M49687</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2022-07-06T07:57:51Z</dc:date>
    </item>
    <item>
      <title>Re: trellis chart showing the average time spent on a website</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604594#M49688</link>
      <description>&lt;P&gt;Thank you so much !!&lt;/P&gt;&lt;P&gt;I think I have the data now, but not sure how to&amp;nbsp; &lt;SPAN class=""&gt;Plot a trellis chart showing the average time for&lt;BR /&gt;each user session by browser &lt;/SPAN&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunkis0927_0-1657117463195.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/20417i47B73C144DBF20C4/image-size/medium?v=v2&amp;amp;px=400" role="button" title="splunkis0927_0-1657117463195.png" alt="splunkis0927_0-1657117463195.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunkis0927_1-1657117475162.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/20418i8AA49DC4B839DC93/image-size/medium?v=v2&amp;amp;px=400" role="button" title="splunkis0927_1-1657117475162.png" alt="splunkis0927_1-1657117475162.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 06 Jul 2022 14:25:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-plot-a-trellis-chart-showing-the-average-time-spent-on-a/m-p/604594#M49688</guid>
      <dc:creator>splunkis0927</dc:creator>
      <dc:date>2022-07-06T14:25:47Z</dc:date>
    </item>
  </channel>
</rss>

