Dashboards & Visualizations

Dashboard design timechart

sphiwee
Contributor
index="intau" host="server1" sourcetype="services_status.out.log" service="HTTP/1.1" status=* | chart count by status
| eventstats sum(count) as total
| eval percent=100*count/total
| eval percent=round(percent,2)
| eval SLO =if( status="200","99,9%","0,1%")
| where NOT (date_wday=="saturday" AND date_hour >= 8 AND date_hour < 11)
| fields - total count

 

availability.PNG

I have the above Query and the above result , how can i combine 502 and 200 results to show our availability excluding maintenance time of 8pm to 10pm every Saturday, how can i make it look like the drawing I produced there

Labels (3)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
index="intau" host="server1" sourcetype="services_status.out.log" service="HTTP/1.1" status=* 
| eval status=if(status=502,200,status)
| chart count by status
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...