Dashboards & Visualizations

Generate charts by host

saad_siddiqi
Path Finder

I was wondering if there is any way through with we can generate graphs per hosts ( each host having different chart.

I need to have a report per server for performance stats in a more presentable manner and currently using sparkline format as below and sparkline formated to a line.

        <table>
     <option name="count">1000</option>
    <title> Performance Summary</title>
    <searchTemplate>            
         eventtype="windows_performance" host=* object="Processor" counter="% Processor Time"|rename Value AS CPU  | append[search eventtype="windows_performance" host=* object="LogicalDisk" counter="% Free Space"  instance="*"|rename Value AS Disk]| append[search eventtype="windows_performance" host=* object="Memory" counter="% Committed Bytes In Use"|rename Value AS Memory]|  stats sparkline(avg(CPU)) as CPU, sparkline(avg(Disk)) as Disk,sparkline(avg(Memory)) as Memory by host | sort by host ASC
    </searchTemplate>
     <format field="host" type="text">
     <option name="fontSize">14</option>    
  </format>            
    <format field="CPU" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option>    
  </format>
    <format field="Disk" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">green</option> 

  </format>
    <format field="Memory" type="sparkline">
    <option name="type">line</option>
    <option name="height">100</option>    
    <option name="width">300</option>    
    <option name="lineWidth">2</option> 
    <option name="lineColor">red</option> 
  </format

Any help on this ??

Thanks

0 Karma

sja_serenergy
New Member

I have the same issue. It would be very nice with the possibility of directly changing the fontsize of things like axis ticks, titles, legend, etc. Other option I guess to use API or setup pdf report with pretty formatted graphs. But that seems like a lot of extra work.

0 Karma

jtrucks
Splunk Employee
Splunk Employee

Try this:
true

As defined at:

http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/AdvChartingConfig-LayoutData

--
Jesse Trucks
Minister of Magic
0 Karma

saad_siddiqi
Path Finder

I actually want to show the performance stats with respect to time, that's why I want to create a timechart for every host.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk App Dev Quarterly Roundup: AI, Agents, and Innovation!

Another quarter, another wave of innovation. From complex integrations to pushing the limits ...

Federated Search for Dynamic Data Self Storage Is Now Generally Available on Splunk ...

 Splunk is excited to announce the General Availability of Federated Search for Dynamic Data Self Storage ...

Index This | What has many keys but can’t unlock a door?

July 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...