All Apps and Add-ons

Adding more info to a chart while hovering a data point

wajeeh911
Engager

Currently I have charts in my dashboard that display the 50th and 90th percentile. When I hover a data point it only shows the 90th or 50th percentile. I want to add the standard deviation and mean for each data point I hover without graphing it, where do I make that change.

Adding it here:
alt text

<dashboard>
 <label>Perf Tests</label>
  <search id="First_Base_Search">
  <query>index=Auto log!=null location=farm</query>
  </search>   
 <row>
   <panel>
     <chart>
       <title>September Chart</title>
       <search base="First_Base_Search">
             <query>search fruit=apple | rename growTime as Duration | stats perc50(totalTimes) as s50,  perc90(totalTimes) as s90 by Duration | table Duration, s50, s90 | untable Duration, percentile, value | chart first(value) over Duration  by percentile</query>
         <earliest>$earliest$</earliest>
         <latest>$latest$</latest>
         <refresh>1m</refresh>
         <refreshType>delay</refreshType>
       </search>
       <option name="charting.axisLabelsX.majorLabelStyle.rotation">-45</option>
       <option name="charting.chart">line</option>
       <option name="charting.drilldown">none</option>
       <option name="refresh.display">none</option>
       <option name="charting.lineWidth">3</option>
     </chart>
   </panel>
   <panel>
     <chart>
       <title>November Chart</title>
       <search base="First_Base_Search">
         <query>search fruit=pear | rename growTime as Duration | stats perc50(totalTimes) as s50, perc90(totalTimes) as s90 by Duration | table Duration, s50, s90 | untable Duration, percentile, value | chart first(value) over Duration  by percentile</query>
         <earliest>$earliest$</earliest>
         <latest>$latest$</latest>
         <refresh>1m</refresh>
         <refreshType>delay</refreshType>
       </search>
       <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
       <option name="charting.axisLabelsX.majorLabelStyle.rotation">-45</option>
       <option name="charting.chart">line</option>
       <option name="charting.drilldown">none</option>
       <option name="refresh.display">none</option>
       <option name="charting.lineWidth">3</option>
     </chart>
   </panel>
   <panel>
     <chart>
       <title>December Chart</title>
       <search base="First_Base_Search">
         <query>search fruit=apricot | rename growTime as Duration | stats perc50(totalTimes) as s50, perc90(totalTimes) as s90 by Duration | table Duration, s50, s90 | untable Duration, percentile, value | chart first(value) over Duration  by percentile</query>
         <earliest>$earliest$</earliest>
         <latest>$latest$</latest>
         <refresh>1m</refresh>
         <refreshType>delay</refreshType>
       </search>
       <option name="charting.axisLabelsX.majorLabelStyle.rotation">-45</option>
       <option name="charting.chart">line</option>
       <option name="charting.drilldown">none</option>
       <option name="refresh.display">none</option>
       <option name="charting.lineWidth">3</option>
     </chart>
   </panel>
 </row>
       </dashboard>
0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...