Dashboards & Visualizations

Display table into a timechart

hishamjan
Explorer

Hi,

 

I would like to display my table into a timechart/chart graph instead.

Below is the screenshot attached of the table via my search query:

hishamjan_0-1614682775656.png

 

I would like to convert this into a timechart/chart graph where memFreePct and memUsedPct is shown per time for each host, A to E.

 

thanks

Labels (3)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

There is no time component in your search results

0 Karma

hishamjan
Explorer

here is my search query:

source="vmstat"
            | dedup host 
 | eval host=upper(host)
            | eval FreeGBs=FreeMBytes/1024, TotalGBs=TotalMBytes/1024, UsedGBs=UsedMBytes/1024
            | table host memFreePct memUsedPct
| sort host
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

So, the first thing you need to do is modify this query to return a time element (assuming that is in your source data)

0 Karma

hishamjan
Explorer

that's exactly what I'm unable to do 🙂

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Start with your data - what fields do you have in vmstat?

0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...