Dashboards & Visualizations

How to create a time series dashboard with different charts based on devicetype from a CSV file?

psalibindla9524
New Member

Instead, I wanna do as below
test.csv

devicetype


router
switch
firewall
sysproxy
webproxy

I would like to create a timeseries dashboard based on devicetype in different charts

router
GRAPH

Switch
GRAPH

Firewall
GRAPH

0 Karma

sundareshr
Legend

Create a chart panel in your dashboard with this query

|inputlookup test.csv | bin span=1h nameforfieldwithtimestampinyourcsv | chart count by nameforfieldwithtimestampinyourcsv devicetype

Click the paintbrush icon for this dashboard panel, and select multiseries mode. This will show each devicetype separatel. You can increase the height of the chart panel, by editing the source to include (pick appropriate number)

<option name="height")300</option>

*UPDATED* based on feedback
You have couple of options. First, you can create a multi-series panel, like described above, using this query

index=xyz [|inputlookup test.csv | rename devicetype AS name | fields name ] | timechart values(lograte) as lograte by name

OR create three separate panels, with each for specific devicetype using this query for panel where devicetype is router (change the name= part for each panel`

index=xyz name="router" | timechart values(lograte) as lograte
0 Karma

psalibindla9524
New Member

Hi ,

test.csv

devicetype

router
firewall
switch

indexed data:

name=router lograte=20
name=switch lograte=30
name=firewall lograte=40

i would like to plot the lograte per each name in timeseries . I would like to see 3 timeseries graphs based on the name

0 Karma

sundareshr
Legend

What data do you want to plot for each device type?

0 Karma

psalibindla9524
New Member

based my devicetype .. i would like to look for number of devices logging or number of critical alerts.

-pa1

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...