All Apps and Add-ons

How To Create Heat Map time as X axis?

manikanthkoti
Explorer

Hi,
I have below a table with fields (hourTime, appName, Fail). This table tells you how many transactions are failed for the Particular application in that hour.

Please help me to create the heat map by using these fields as hourTime as X-Axis and appName as Y-Axis.

I am trying for "Heat Map Viz" please find the link(https://splunkbase.splunk.com/app/4460/#/details)

Please help me is there any better Visuvilizations also to Display this.

Please help me . Thank you very much in advance

alt text

0 Karma
1 Solution

to4kawa
Ultra Champion

Sample:

| makeresults count=2 
| streamstats count 
| eval _time=if(count=2,relative_time(_time,"-2d@d"),relative_time(_time,"-1d@d")) 
| makecontinuous _time span=5m 
| eval appName="APP_".(random() % 3 + 1), count = random() % 10 + 1 
| timechart span=1h sum(count) as count by appName

Hi , @manikanthkoti
hourTime is bad format.
Please provide your query. I'll fix it.

View solution in original post

0 Karma

to4kawa
Ultra Champion

Sample:

| makeresults count=2 
| streamstats count 
| eval _time=if(count=2,relative_time(_time,"-2d@d"),relative_time(_time,"-1d@d")) 
| makecontinuous _time span=5m 
| eval appName="APP_".(random() % 3 + 1), count = random() % 10 + 1 
| timechart span=1h sum(count) as count by appName

Hi , @manikanthkoti
hourTime is bad format.
Please provide your query. I'll fix it.

0 Karma

manikanthkoti
Explorer

Thank you very much I did the same thing now I am getting Visualizations but I need a colors based on appName, not by Fail.
Is there any way to change the color based on appName?

0 Karma

spavin
Path Finder

Hi Manikanthkoti,

Can you provide an example of coloring by appName? The heat map is designed to show variation in the data - in this case the count. Are you looking for static colors for each app?

0 Karma

to4kawa
Ultra Champion

sorry, I don't know.
option is nothing.
If you want to change the color based on appName, maybe you should create SplunkJS.

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.3.2411?

Hey Splunky People! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2411. This release ...

Buttercup Games: Further Dashboarding Techniques (Part 6)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...