Dashboards & Visualizations

Generate charts by host

saad_siddiqi
Path Finder

I was wondering if there is any way through with we can generate graphs per hosts ( each host having different chart.

I need to have a report per server for performance stats in a more presentable manner and currently using sparkline format as below and sparkline formated to a line.

        <table>
     <option name="count">1000</option>
    <title> Performance Summary</title>
    <searchTemplate>            
         eventtype="windows_performance" host=* object="Processor" counter="% Processor Time"|rename Value AS CPU  | append[search eventtype="windows_performance" host=* object="LogicalDisk" counter="% Free Space"  instance="*"|rename Value AS Disk]| append[search eventtype="windows_performance" host=* object="Memory" counter="% Committed Bytes In Use"|rename Value AS Memory]|  stats sparkline(avg(CPU)) as CPU, sparkline(avg(Disk)) as Disk,sparkline(avg(Memory)) as Memory by host | sort by host ASC
    </searchTemplate>
     <format field="host" type="text">
     <option name="fontSize">14</option>    
  </format>            
    <format field="CPU" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option>    
  </format>
    <format field="Disk" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">green</option> 

  </format>
    <format field="Memory" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">red</option> 
  </format

Any help on this ??

Thanks

0 Karma

sja_serenergy
New Member

I have the same issue. It would be very nice with the possibility of directly changing the fontsize of things like axis ticks, titles, legend, etc. Other option I guess to use API or setup pdf report with pretty formatted graphs. But that seems like a lot of extra work.

0 Karma

jtrucks
Splunk Employee
Splunk Employee

Try this:
true

As defined at:

http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/AdvChartingConfig-LayoutData

--
Jesse Trucks
Minister of Magic
0 Karma

saad_siddiqi
Path Finder

I actually want to show the performance stats with respect to time, that's why I want to create a timechart for every host.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...