How to show the trend Indicator to the hard coded values in splunk

[aditsss]

Hi Everyone , How can I show trend Indicator to the hardcoded values . I have one single value like this:

| stats count as test | eval test=test+10 |table test .

I am getting 10 as value.

I want to show percentage indicator on it but I am not getting that option in single value. Can someone guide me on that.

[scelikok]

Hi @aditsss,

Trend indicator need a time series data. Single value visualization show the last value of the time series data and calculates the percentage using earlier values. You can try using timechart;

| timechart count as test

If this reply helps you an upvote is appreciated.

[aditsss]

@scelikok 

I tried like this:

| stats count as test | eval test=test+10 |table test| timechart count as test

nothing is coming. Can you guide me on this.

[scelikok · Accepted solution]

After your stats command you have only one field as test. There is no time series data.

You can try below without any changes,  but in any case you should have more than one event.

| timechart count as test | eval test=test+10 

[aditsss]

@scelikok 

I tried like this:

| timechart count as test | eval test=test+10

But I not getting any result. How can I add two hardcoded values  and then show trend Indicator between them.

Can you guide me 

[aditsss]

Can someone please guide me on this

[aditsss]

Can someone please guide me on this.