Dashboards & Visualizations

Need help to create bubblechart (if even possible)

Path Finder

I am trying to create a bubblechart based on the search below. I have tried different methods to create something similar to the edited bubblechart image below, but with no success so far. I hope someone here can possibly help me achieve this, if it is even possible?

I can see that i probably would need to get the eventcodes in a own columns, and same with the count...but how?

My search


0 Karma


I think you can't do it. Bubble charts require three dimensions, but you have only two. See https://docs.splunk.com/Documentation/Splunk/8.0.4/Viz/BubbleChart

If this reply helps you, an upvote would be appreciated.
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!