@matansocher @Goesta if you are using Machine Learning Toolkit app, Box Plot visualization comes with the App along with example for how to plot in corresponding Splunk Docs: https://docs.splunk.com/Documentation/MLApp/latest/User/Customvisualizations#Boxplot_Chart
Following is a run anywhere search based on Splunk's _internal index that you can try out:
index=_internal sourcetype=splunkd log_level!=INFO earliest=-7d@d latest=now | bin _time span=1d | top 5 component by _time | stats min(count) exactperc25(count) median(count) exactperc75(count) max(count) by component | untable component calculations count | xyseries calculations component count | eval calculations=rtrim(calculations,"(count)")
Following is the snippet of above query:
PS: If you are using Box Plot Custom Viz from Splunkbase, you should be aware that it was built using older Custom Visualization API for
Splunk 6.4 which is no longer supported after version 6.5.