Dashboards & Visualizations

Generate charts by host

saad_siddiqi
Path Finder

I was wondering if there is any way through with we can generate graphs per hosts ( each host having different chart.

I need to have a report per server for performance stats in a more presentable manner and currently using sparkline format as below and sparkline formated to a line.

        <table>
     <option name="count">1000</option>
    <title> Performance Summary</title>
    <searchTemplate>            
         eventtype="windows_performance" host=* object="Processor" counter="% Processor Time"|rename Value AS CPU  | append[search eventtype="windows_performance" host=* object="LogicalDisk" counter="% Free Space"  instance="*"|rename Value AS Disk]| append[search eventtype="windows_performance" host=* object="Memory" counter="% Committed Bytes In Use"|rename Value AS Memory]|  stats sparkline(avg(CPU)) as CPU, sparkline(avg(Disk)) as Disk,sparkline(avg(Memory)) as Memory by host | sort by host ASC
    </searchTemplate>
     <format field="host" type="text">
     <option name="fontSize">14</option>    
  </format>            
    <format field="CPU" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option>    
  </format>
    <format field="Disk" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">green</option> 

  </format>
    <format field="Memory" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">red</option> 
  </format

Any help on this ??

Thanks

0 Karma

sja_serenergy
New Member

I have the same issue. It would be very nice with the possibility of directly changing the fontsize of things like axis ticks, titles, legend, etc. Other option I guess to use API or setup pdf report with pretty formatted graphs. But that seems like a lot of extra work.

0 Karma

jtrucks
Splunk Employee
Splunk Employee

Try this:
true

As defined at:

http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/AdvChartingConfig-LayoutData

--
Jesse Trucks
Minister of Magic
0 Karma

saad_siddiqi
Path Finder

I actually want to show the performance stats with respect to time, that's why I want to create a timechart for every host.

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...