Dashboards & Visualizations

How to Make a line chart for 2 parameters

palak-xperi
Loves-to-Learn

the first parameter is expectedBw and the other one is observedBw the expectedBw remains constant we have to show by line graph that how the expectedBw is being achieved with respect to observedBw. There need to be 2 lines one for expectedBw one for observedBw. the x axis should have time and y axis should have bandwidth means at different time how is the observedBw going forward or behind the expectedBw

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @palak-xperi,

if expectedBw is a fixed value, you could use a solution like this:

index=_internal
| timechart count AS observedBw
| eval expectedBw=3000

Ciao.

Giuseppe

0 Karma

palak-xperi
Loves-to-Learn

but expectedBw also vary in different cases as the data is dynamic

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @palak-xperi,

Is there a rule for this variation?

you have to recreate this rule in your search.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...