Dashboards & Visualizations

Generate charts by host

saad_siddiqi
Path Finder

I was wondering if there is any way through with we can generate graphs per hosts ( each host having different chart.

I need to have a report per server for performance stats in a more presentable manner and currently using sparkline format as below and sparkline formated to a line.

        <table>
     <option name="count">1000</option>
    <title> Performance Summary</title>
    <searchTemplate>            
         eventtype="windows_performance" host=* object="Processor" counter="% Processor Time"|rename Value AS CPU  | append[search eventtype="windows_performance" host=* object="LogicalDisk" counter="% Free Space"  instance="*"|rename Value AS Disk]| append[search eventtype="windows_performance" host=* object="Memory" counter="% Committed Bytes In Use"|rename Value AS Memory]|  stats sparkline(avg(CPU)) as CPU, sparkline(avg(Disk)) as Disk,sparkline(avg(Memory)) as Memory by host | sort by host ASC
    </searchTemplate>
     <format field="host" type="text">
     <option name="fontSize">14</option>    
  </format>            
    <format field="CPU" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option>    
  </format>
    <format field="Disk" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">green</option> 

  </format>
    <format field="Memory" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">red</option> 
  </format

Any help on this ??

Thanks

0 Karma

sja_serenergy
New Member

I have the same issue. It would be very nice with the possibility of directly changing the fontsize of things like axis ticks, titles, legend, etc. Other option I guess to use API or setup pdf report with pretty formatted graphs. But that seems like a lot of extra work.

0 Karma

jtrucks
Splunk Employee
Splunk Employee

Try this:
true

As defined at:

http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/AdvChartingConfig-LayoutData

--
Jesse Trucks
Minister of Magic
0 Karma

saad_siddiqi
Path Finder

I actually want to show the performance stats with respect to time, that's why I want to create a timechart for every host.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...