topic Re: generating a graphic in dashboard xml code in Dashboards & Visualizations

generating a graphic in dashboard xml code

riley_lewis — Tue, 23 Apr 2024 20:01:28 GMT

Hi,

I am trying to do a chart overlay using a normal distribution graphic based upon the mean and standard deviation acquired from the fieldsummary command. I can generate the values in perl (below) for a bell curve. Can you tell me how to do this in the Splunk Dashboard xml? Thanks.

#!/usr/bin/perl # min, max, count, mean, stdev all come from the fieldsummary command. $min = 0.442; $max = 0.507; $mean = 0.4835625; $stdev = 0.014440074377630105; $count = 128; $pi = 3.141592653589793238462; # The numbers above do not indicate a Gaussian distribution. # Create an artificial normal distribution (for the plot overlay) # based on 6-sigma. $min = sprintf("%.3f", $mean - 3.0*$stdev); # use sprintf as a rounding function $max = sprintf("%.3f", $mean + 3.0*$stdev); $interval = ($max - $min)/($count - 1); $x = $min; for ($i=0; $i<$count; $i++) { $y = (1.0/($stdev*sqrt(2.0*$pi))) * exp(-0.5*((($x-$mean)/$stdev)**2)); $myFIELD[$i] = sprintf(%.3f",$y); printf("myFIELD[$i]\n"); $x = $x + $interval; } exit;

Re: generating a graphic in dashboard xml code

bowesmana — Wed, 24 Apr 2024 02:11:24 GMT

Quite literally

Re: generating a graphic in dashboard xml code

bowesmana — Wed, 24 Apr 2024 02:25:54 GMT

And if you then want to make that a bar chart, replace the fields - c at the end with

| fields myFIELD | mvexpand myFIELD | eval count=tonumber(myFIELD)