All Apps and Add-ons

Multiple Search for IP Network & Show in a Stacked Bar Chart

jeehinwong
New Member

Hi Guys,
I'm having a touch time here due to i'm still new in splunk. I am actually stuck on the situation below:
Below showing 192.168.0.0/16 & 192.169.0.0/16 is actually a network container that stores a lot of /30 network inside, and i would like to calculate all the used and available ip and show in a stacked bar chart of 100% which need to show how many percent is used and how many percent unused.

But i am having trouble to group both search and show in a single stacked bar chart. Can anyone help?
Below are both my search string:

search address=192.168.0.0/16 view="Public View" protocol=IPV4 | dedup address
| eval address_left=(address_total-address_reserved-address_alloc)
| eval address_used=(address_reserved+address_alloc)
| stats sum(address_total), sum(address_left), sum(address_used)

search address=192.169.0.0/16 view="Public View" protocol=IPV4 | dedup address
| eval address_left=(address_total-address_reserved-address_alloc)
| eval address_used=(address_reserved+address_alloc)
| stats sum(address_total), sum(address_left), sum(address_used)

0 Karma
Get Updates on the Splunk Community!

Meet Duke Cyberwalker | A hero’s journey with Splunk

We like to say, the lightsaber is to Luke as Splunk is to Duke. Curious yet? Then read Eric Fusilero’s latest ...

The Future of Splunk Search is Here - See What’s New!

We’re excited to introduce two powerful new search features, now generally available for Splunk Cloud Platform ...

Splunk is Nurturing Tomorrow’s Cybersecurity Leaders Today

Meet Carol Wright. She leads the Splunk Academic Alliance program at Splunk. The Splunk Academic Alliance ...