Dashboards & Visualizations

Average of Time Bucket Over Time

davidlapello
Engager

I want to create a dashboard that shows 2 things.  First, it will search over the last 60 minutes for total errors. 

sourcetype=blabla  error

And, it will look for average errors for the same time period over the past month.  For example, if the search is ran at 14:29, it will show the average errors for 13:30-14:29 for each day over the last month, preferably just weekdays.  

So, it will show a stats table with two results.  Total errors for the last 60 minutes, and average errors over that time period for the last month.

 

Thanks

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...