topic Area Chart - Dashboard in Dashboards & Visualizations

Area Chart - Dashboard

Ram2 — Mon, 22 Jul 2024 19:32:21 GMT

Query1:

|tstats count as Requests sum(attributes.ResponseTime) as TotalResponseTime where index=app-index NOT attributes.uriPath("/", null, "/provider") |eval TotResTime=TotalResponseTime/Requests |fields TotResTime

Query2:

|tstats count as Requests sum(attributes.latencyTime) as TotalatcyTime where index=app-index NOT attributes.uriPath("/", null, "/provider") |eval TotlatencyTime=TotalatcyTime/Requests |fields TotlatencyTime

We want to combine these 2 queries and create area chart panel.

how to do this??

Re: Area Chart - Dashboard

richgalloway — Tue, 23 Jul 2024 12:09:56 GMT

Putting the queries together is pretty simple, but getting a usable graph from the result is another matter.

| tstats count as Requests sum(attributes.ResponseTime) as TotalResponseTime sum(attributes.latencyTime) as TotalatcyTime where index=app-index NOT attributes.uriPath("/", null, "/provider") | eval TotResTime=TotalResponseTime/Requests, TotlatencyTime=TotalatcyTime/Requests | fields TotResTime TotlatencyTime

This will produce two single-value fields, which isn't enough for an area chart. What is it you want to show in the chart?

Re: Area Chart - Dashboard

Ram2 — Tue, 23 Jul 2024 13:28:40 GMT

@richgalloway , I want to show the total data coming from each query by _time in area chart.

For example:

When we run 1st query i will get output as 100.0789, I want to show this same output as _time in area chart.
I mean to say i want to split this 100.0789 by _time and shown it in area graph.

Re: Area Chart - Dashboard

richgalloway — Tue, 23 Jul 2024 14:06:11 GMT

To graph data over time requires the _time field and a charting command. Usually, I use timechart, but it only supports a single field so this query uses chart.

| tstats count as Requests sum(attributes.ResponseTime) as TotalResponseTime sum(attributes.latencyTime) as TotalatcyTime where index=app-index NOT attributes.uriPath("/", null, "/provider") by _time span=1d | eval TotResTime=TotalResponseTime/Requests, TotlatencyTime=TotalatcyTime/Requests | chart max(TotResTime) as TotResTime, max(TotlatencyTime) as TotlatencyTime over _time

Re: Area Chart - Dashboard

Ram2 — Tue, 23 Jul 2024 18:04:54 GMT

@richgalloway , thank you so much it worked