Dashboards & Visualizations

Generate charts by host

saad_siddiqi
Path Finder

I was wondering if there is any way through with we can generate graphs per hosts ( each host having different chart.

I need to have a report per server for performance stats in a more presentable manner and currently using sparkline format as below and sparkline formated to a line.

        <table>
     <option name="count">1000</option>
    <title> Performance Summary</title>
    <searchTemplate>            
         eventtype="windows_performance" host=* object="Processor" counter="% Processor Time"|rename Value AS CPU  | append[search eventtype="windows_performance" host=* object="LogicalDisk" counter="% Free Space"  instance="*"|rename Value AS Disk]| append[search eventtype="windows_performance" host=* object="Memory" counter="% Committed Bytes In Use"|rename Value AS Memory]|  stats sparkline(avg(CPU)) as CPU, sparkline(avg(Disk)) as Disk,sparkline(avg(Memory)) as Memory by host | sort by host ASC
    </searchTemplate>
     <format field="host" type="text">
     <option name="fontSize">14</option>    
  </format>            
    <format field="CPU" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option>    
  </format>
    <format field="Disk" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">green</option> 

  </format>
    <format field="Memory" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">red</option> 
  </format

Any help on this ??

Thanks

0 Karma

sja_serenergy
New Member

I have the same issue. It would be very nice with the possibility of directly changing the fontsize of things like axis ticks, titles, legend, etc. Other option I guess to use API or setup pdf report with pretty formatted graphs. But that seems like a lot of extra work.

0 Karma

jtrucks
Splunk Employee
Splunk Employee

Try this:
true

As defined at:

http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/AdvChartingConfig-LayoutData

--
Jesse Trucks
Minister of Magic
0 Karma

saad_siddiqi
Path Finder

I actually want to show the performance stats with respect to time, that's why I want to create a timechart for every host.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...