Dashboards & Visualizations

Display table into a timechart

hishamjan
Explorer

Hi,

 

I would like to display my table into a timechart/chart graph instead.

Below is the screenshot attached of the table via my search query:

hishamjan_0-1614682775656.png

 

I would like to convert this into a timechart/chart graph where memFreePct and memUsedPct is shown per time for each host, A to E.

 

thanks

Labels (3)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

There is no time component in your search results

0 Karma

hishamjan
Explorer

here is my search query:

source="vmstat"
            | dedup host 
 | eval host=upper(host)
            | eval FreeGBs=FreeMBytes/1024, TotalGBs=TotalMBytes/1024, UsedGBs=UsedMBytes/1024
            | table host memFreePct memUsedPct
| sort host
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

So, the first thing you need to do is modify this query to return a time element (assuming that is in your source data)

0 Karma

hishamjan
Explorer

that's exactly what I'm unable to do 🙂

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Start with your data - what fields do you have in vmstat?

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...