All Apps and Add-ons

Waterfall Custom Visualization App and Trellised data

jlr
Explorer

I'm wanting to produce a variable, large number of Waterfall charts all with the same format and source data. Is it possible to do this in a Trellis with a Waterfall chart using this app? If not, what would be needed to improve it to do so, or is there an alternate app that can do it?
Example data generated as follows:

| makeresults 
| eval
  2019-01="1,2,3",
  2019-02="1,2,3",
  2019-03="2,2,2",
  2019-04="-1,0,1"
| fields - _time
| transpose 0 column_name="month"
| rex field="row 1" "(?<dat1>.+),(?<dat2>.+),(?<dat3>.+)"
| fields month dat*
| addcoltotals labelfield="month" label="Total"

Adding a | fields month dat1 shows a single valid Waterfall chart, but I'd ideally like to see a way of having the above data create 3 Trellised Waterfall charts (or in the case of my dataset, a trellissed chart per dat* column). In order to get this working with this app I'd have to create a panel per chart with visibility triggers on each, which isn't as desirable.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...