Dashboards & Visualizations

How to change chart from line to dotted line depending on the column value?

damucka
Builder

Hello,

I have following table:

damucka_0-1658307846408.png

it keeps the _time, server, CPU load and the predicted CPU load. The last column PREDICTION tells if the given value is a real reading or predicted one based on the ML algorithms (important: no ML Toolkit involved, but external result input).

Now, I would like to present all this in the dashboard in a decent way, kind like the smartforecastviz macro of the ML Toolkit does - real CPU for server with normal line and the prediction with the dotted one, same color. Possibly all servers in the same line chart. No additional fancy things needed.

I guess what would need to happen is the chart line type change, depending on the last column PREDICTION. 

Is it doable in any way?

Kind Regards,

Kamil

Labels (1)
Tags (2)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Lines on a chart are based on the series

Each line will have one colour

You could split your data for each server into two series (with and without prediction).

The issue with that might be that there will be a break between the end of one line and the start of the next.

Also, a series with only one data point becomes a dot rather than a line.

To overcome these, you could duplicate the last non-prediction entry as a prediction entry.

In order for the lines to have the same colour, you could set the series colours with formatting options.

In order to make some of the lines dotted / dashed, you could use CSS.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...