Dashboards & Visualizations

Highlight multiple chart lines

paul_thomas_bb
Explorer

Hi all,
More of an enhancement request unless there is an app / code that can do this.

I always seem to come across the same chart issue time and again.
We build a generic line chart with numerous group by categories and add to a dashboard.
Such as a stat for numerous servers in a pool.

When coming to compare, usually the items to compare are not next to each other.
We can only highlight one line at a time by hovering over the legend.
It would be good to be able to click or tick multiple legend items to remain highlighted for comparison.
Or being able to drag and drop the order of the legend to make flicking between lines to compare.

Pre-ordering is like looking into the crystal ball of which items you want to compare in future.

Thanks Paul

Tags (1)

woodcock
Esteemed Legend

Take a look at swim lanes in ITSI. That allows you to do what you are needing

0 Karma

paul_thomas_bb
Explorer

Sounds good, will try it out

0 Karma

niketn
Legend

@paul_thomas_bb if you are on Splunk 7.x you can use seriesCompare option to have all series values at the same time as legends. Refer to an old answer: https://answers.splunk.com/answers/710781/how-do-you-deal-with-visualization-disparities-in.html

Second option would be to use Horizon Chart custom visualization: https://splunkbase.splunk.com/app/3117/

Please try out and confirm.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

paul_thomas_bb
Explorer

Thanks, will take a look

0 Karma

woodcock
Esteemed Legend

Many things are both different and improved for the new dashboarding React framework. Try downloading the Dashboards (Beta) app and see if it can do something like this.

0 Karma

paul_thomas_bb
Explorer

Thanks, will take a look

0 Karma

dindu
Contributor

Hey @paul_thomas_bb,

It would be difficult to hover over multiple legends at the same time.
But to have better comparison, you could color code the categories.

Edit the chart xml like below.

<option name="charting.fieldColors"> 
{"Category01":0xeeeeee,"Category02":0x65a637,"Category03":0x333333,"Category04":0xd93f3c,"Category05"  
:0xf58f39,"Category06":0xf7bc38}
 </option>

Please accept and upvote if this helped.
Happy Splunking!

0 Karma

paul_thomas_bb
Explorer

Thanks, but more thinking about users of dashboard and when you don't know what you will be comparing the next time. Don't want to waste time in XML when investigating issues.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...