Dashboards & Visualizations

Cant get box plot to work

matansocher
Contributor

Hi,

I am trying to create a box plot of my data.
the output of my search is:

alt text

I get the error:
Failed to load source for Box Plot visualization.

0 Karma

niketn
Legend

@matansocher @Goesta if you are using Machine Learning Toolkit app, Box Plot visualization comes with the App along with example for how to plot in corresponding Splunk Docs: https://docs.splunk.com/Documentation/MLApp/latest/User/Customvisualizations#Boxplot_Chart

Following is a run anywhere search based on Splunk's _internal index that you can try out:

index=_internal sourcetype=splunkd log_level!=INFO earliest=-7d@d latest=now
| bin _time span=1d
| top 5 component by _time
| stats min(count) exactperc25(count) median(count) exactperc75(count) max(count) by component
| untable component calculations count 
| xyseries calculations component count 
| eval calculations=rtrim(calculations,"(count)")

Following is the snippet of above query:

alt text

PS: If you are using Box Plot Custom Viz from Splunkbase, you should be aware that it was built using older Custom Visualization API for Splunk 6.4 which is no longer supported after version 6.5.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

Goesta
Explorer

I get the same error in IE, but not in Chrome or Firefox. Maybe you'll want to test another browser.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...