Dashboards & Visualizations

How do you make a single value panel with spark and trend line with this data?

UMDTERPS
Communicator

 

 

| inputlookup system_trending.csv

| search system = "bob"
|table date “System Score)

| fieldformat date = strftime(date, "%m/%d/%Y")

 


The above search creates the following statistics table for a selected system named “Bob”:

 

date                       Score          
05/20/2020                  10
06/20/2020                  12
07/20/2020                  10           
08/20/2020                  20

 


How do I make this into a single value panel with spark and trend line? If I just select the single value panel from the visualizations it just shows the date of “05/20/2020.”  If I use "| timechart max(date)"  I get 0 results. 


Any ideas?  😀

Thanks!

0 Karma
1 Solution

to4kawa
Ultra Champion

sample:

| makeresults
| eval _raw="date                       Score          
05/20/2020                  10
06/20/2020                  12
07/20/2020                  10           
08/20/2020                  20"
| multikv forceheader=1
| eval date=strptime(date,"%m/%d/%Y")
| table date Score
| rename date as _time

 

recommend:

| inputlookup system_trending.csv where system="bob"
| rename date as _time
| table _time Score

 

View solution in original post

to4kawa
Ultra Champion

sample:

| makeresults
| eval _raw="date                       Score          
05/20/2020                  10
06/20/2020                  12
07/20/2020                  10           
08/20/2020                  20"
| multikv forceheader=1
| eval date=strptime(date,"%m/%d/%Y")
| table date Score
| rename date as _time

 

recommend:

| inputlookup system_trending.csv where system="bob"
| rename date as _time
| table _time Score

 

UMDTERPS
Communicator

That works! 👍 Didn't know it would be that easy! 😀

 

Is there a way to prevent the number from rounding?

Tags (1)
0 Karma

to4kawa
Ultra Champion

>Is there a way to prevent the number from rounding?
which number?

how about modifying "Format > Number Format > Precision"

UMDTERPS
Communicator

Works! 😀

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...