Dashboards & Visualizations

How to show the trend Indicator to the hard coded values in splunk

aditsss
Motivator

Hi Everyone , How can I show trend Indicator to the hardcoded values . I have one single value like this:

| stats count as test | eval test=test+10 |table test .

I am getting 10 as value.

I want to show percentage indicator on it but I am not getting that option in single value. Can someone guide me on that.

Labels (3)
0 Karma
1 Solution

scelikok
SplunkTrust
SplunkTrust

After your stats command you have only one field as test. There is no time series data.

You can try below without any changes,  but in any case you should have more than one event.

| timechart count as test | eval test=test+10 

 

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

scelikok
SplunkTrust
SplunkTrust

Hi @aditsss,

Trend indicator need a time series data. Single value visualization show the last value of the time series data and calculates the percentage using earlier values. You can try using timechart;

| timechart count as test

 

If this reply helps you an upvote is appreciated.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

aditsss
Motivator

@scelikok 

 

I tried like this:

 

| stats count as test | eval test=test+10 |table test| timechart count as test

 

nothing is coming. Can you guide me on this.

0 Karma

scelikok
SplunkTrust
SplunkTrust

After your stats command you have only one field as test. There is no time series data.

You can try below without any changes,  but in any case you should have more than one event.

| timechart count as test | eval test=test+10 

 

If this reply helps you an upvote and "Accept as Solution" is appreciated.

aditsss
Motivator

@scelikok 

 

I tried like this:

| timechart count as test | eval test=test+10

But I not getting any result. How can I add two hardcoded values  and then show trend Indicator between them.

Can you guide me 

0 Karma

aditsss
Motivator

Can someone please guide me on this

0 Karma

aditsss
Motivator

Can someone please guide me on this.

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...