Dashboards & Visualizations

Need to create dynamic dashboard with three parameters

N300853
New Member

I need to create a dynamic dashboard with both individual view and cumulative view for the below requirement
Need to consolidate the API list name with its result and its time
API_Name | Scheduler Run results Date/Time Fail Pass
Assest API | Pass | 04/14/2017 11.30 AM | 0| 1
Membership API | Pass | 04/14/2017 11.30 AM | 0 |1
Plan sponsor API | Pass | 04/14/2017 11.30 AM |0 |1
Assest API | Fail | 04/14/2017 12.00 PM |1 |0
Membership API | Fail | 04/14/2017 12.00 PM |1| 0
Plan sponsor API | Pass| 04/14/2017 12.00 PM |0| 1
Assest API | Pass| 04/14/2017 12.30 PM |0|1
Membership API | Fail | 04/14/2017 12.30 PM| 1 |0
Plan sponsor API Fail 04/14/2017 12.30 PM 1 0

And also suggest which chart will be best to view this result in splunk dashboard

Tags (1)
0 Karma

ErikaE
Communicator

There's probably a more elegant way, but in the past I've appended data summarized the way I want:, e.g.

| your search here 
| append [ search your search again
| stats sum(Fail) as Fail sum(Pass) as Pass by API_Name]

The addtotals command will give you overall totals, you could do it as part of the base search or the append.

Hope that helps!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...