Dashboards & Visualizations

Display Duration, Start Time, End Time in chart visualization

michaelrosello
Path Finder

I am having a hard time figuring out what approach should I use on this.

Basically what I am doing is displaying the duration of the job to finish using the start_time and end_time field and computing the difference between them and display it as a linechart using timechart command.

The problem is I also want to include in the visualization not just the duration but also the start and end time.

The approach that I was thinking but having a hard time thinking on how to execute is .
1. Customize the X-axis label and include the start and end time
2. Customize the tooltip label and include the start and end time

alt text

so base on this screenshot first column is my date, second column is the duration and third and fourth column is the start and end time.

pruthvikrishnap
Contributor

HI Rosello,

I am not sure if this can happen using Line chart, try using column chart/Bar chart which can fit in all three details (Duration, Start and End time).

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...

A Four-Part Event Series: State of Observability - Where AI Meets Performance

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, ...