Dashboards & Visualizations

How do you make a single value panel with spark and trend line with this data?

UMDTERPS
Communicator

 

 

| inputlookup system_trending.csv

| search system = "bob"
|table date “System Score)

| fieldformat date = strftime(date, "%m/%d/%Y")

 


The above search creates the following statistics table for a selected system named “Bob”:

 

date                       Score          
05/20/2020                  10
06/20/2020                  12
07/20/2020                  10           
08/20/2020                  20

 


How do I make this into a single value panel with spark and trend line? If I just select the single value panel from the visualizations it just shows the date of “05/20/2020.”  If I use "| timechart max(date)"  I get 0 results. 


Any ideas?  😀

Thanks!

0 Karma
1 Solution

to4kawa
Ultra Champion

sample:

| makeresults
| eval _raw="date                       Score          
05/20/2020                  10
06/20/2020                  12
07/20/2020                  10           
08/20/2020                  20"
| multikv forceheader=1
| eval date=strptime(date,"%m/%d/%Y")
| table date Score
| rename date as _time

 

recommend:

| inputlookup system_trending.csv where system="bob"
| rename date as _time
| table _time Score

 

View solution in original post

to4kawa
Ultra Champion

sample:

| makeresults
| eval _raw="date                       Score          
05/20/2020                  10
06/20/2020                  12
07/20/2020                  10           
08/20/2020                  20"
| multikv forceheader=1
| eval date=strptime(date,"%m/%d/%Y")
| table date Score
| rename date as _time

 

recommend:

| inputlookup system_trending.csv where system="bob"
| rename date as _time
| table _time Score

 

UMDTERPS
Communicator

That works! 👍 Didn't know it would be that easy! 😀

 

Is there a way to prevent the number from rounding?

Tags (1)
0 Karma

to4kawa
Ultra Champion

>Is there a way to prevent the number from rounding?
which number?

how about modifying "Format > Number Format > Precision"

UMDTERPS
Communicator

Works! 😀

0 Karma
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...