Dashboards & Visualizations

Dashboard design timechart

sphiwee
Contributor
index="intau" host="server1" sourcetype="services_status.out.log" service="HTTP/1.1" status=* | chart count by status
| eventstats sum(count) as total
| eval percent=100*count/total
| eval percent=round(percent,2)
| eval SLO =if( status="200","99,9%","0,1%")
| where NOT (date_wday=="saturday" AND date_hour >= 8 AND date_hour < 11)
| fields - total count

 

availability.PNG

I have the above Query and the above result , how can i combine 502 and 200 results to show our availability excluding maintenance time of 8pm to 10pm every Saturday, how can i make it look like the drawing I produced there

Labels (3)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
index="intau" host="server1" sourcetype="services_status.out.log" service="HTTP/1.1" status=* 
| eval status=if(status=502,200,status)
| chart count by status
0 Karma
Get Updates on the Splunk Community!

Monitoring Postgres with OpenTelemetry

Behind every business-critical application, you’ll find databases. These behind-the-scenes stores power ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...