Dashboards & Visualizations

How to graph the most recent value of an output?

carlsonbJTEKT
Engager

I want to graph values that show a machine's current status over time. However, the machine only sends a status update every time it changes. How can I get the graph to show that the value stays constant until it is updated?

0 Karma
1 Solution

woodcock
Esteemed Legend

Like this:

... | stats latest(fieldname) by host

Or

... | timechart latest(fieldname) by host

View solution in original post

woodcock
Esteemed Legend

Like this:

... | stats latest(fieldname) by host

Or

... | timechart latest(fieldname) by host
Get Updates on the Splunk Community!

Blueprints for High-Maturity Operations: Splunk Lantern Articles on SOAR, ES 8.4, ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Simplifying the Analyst Experience with Finding-based Detections

    Splunk invites you to an engaging Tech Talk focused on streamlining security operations with ...

[Puzzles] Solve, Learn, Repeat: Word Search

This challenge was first posted on Slack #puzzles channelThis puzzle is based on a letter grid containing ...