Dashboards & Visualizations

Bar Chart Visualization

intern_jos
Engager

I would like to know if there is a way to display the total number of events at the top of the bar chart instead of using mouse over to see the exact number of events.

Thanks.

Tags (1)
0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi intern_jos,

Yes, you can enable this in the Visualization Format options:

alt text
and click on show data values. The result will be the values on the bars:

alt text

Hope this helps ...

cheers, MuS

View solution in original post

chimell
Motivator

Hi intern_jos
use these files if you work on splunk 6.2.x

1- xml code

<form script="custom_chart.js" stylesheet="custom_chart.css">
    <label>count by sourcetype</label>
   <fieldset autoRun="false" submitButton="false">

    <input type="time" token="tm" searchWhenChanged="true">
    <label>Select a time:</label>
    <default>All Time</default>
    </input>



  </fieldset>


  <row grouping="2">
        <html>
          <h2><strong>count by sourcetype</strong></h2>
            <div id="chart1" />
        </html>
        <table id="table1">
            <searchString>index=_internal |stats count by sourcetype</searchString>
            <earliestTime>$tm.earliest$</earliestTime>
            <latestTime>$tm.latest$</latestTime>
        </table>
    </row>


</form>

2- here is the js file

require([
    'underscore',
    'jquery',

    'splunkjs/mvc/utils',
    'splunkjs/mvc',
    'splunkjs/mvc/d3chart/d3chartview',
    'util/moment',
    'splunkjs/mvc/simplexml/ready!'
], function(_, $, utils, mvc, D3ChartView, moment) {

    // Re-use the search manager of the results table
    // var SearchManager = require("splunkjs/mvc/searchmanager");
     var tableManagerid1 = mvc.Components.get('table1').settings.get('managerid');
    // Create the D3 chart view
    var Barchart1 = new D3ChartView({
        "id": "chart1",
        "managerid": tableManagerid1,
        "type": "multiBarHorizontalChart",
        "drilldown": "full",
        "drilldownRedirect": false,
        "el": $('#chart1')
    }).render();

    Barchart1.settings.set("setup", function(chart) {
        // Configure chart formatting
        chart.color(d3.scale.category10().range())
        chart.showControls(true);
        chart.showValues(true); //Show bar value next to each bar.
        chart.tooltips(true);

    }); 

});

3- and the css file

#chart1
 {
    height: 450px;
}
0 Karma

MuS
SplunkTrust
SplunkTrust

Hi intern_jos,

Yes, you can enable this in the Visualization Format options:

alt text
and click on show data values. The result will be the values on the bars:

alt text

Hope this helps ...

cheers, MuS

intern_jos
Engager

Hi,

Thanks for this answer but sadly mine is Splunk 6.2 so does not have this function.
It would be great for Splunk 6.3 users!

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...