Dashboards & Visualizations

Response Trending with Color code

apillai01
New Member

I am creating a dashboard to display the current hour performance of my service's comparing with the same with last day same hour and last week same hour and see if performance looks like. I would like the display only current hour performance in Green(<30%), Ambe(30-50), Red based( > 50%) on the comparison

index=* sourcetype="*" SourceSystemID="*"  ="*" ServiceName="*"  ServiceOperationName="*" OR "*" OR "*" OR "*" earliest=-1h@h latest=@h | stats Perc90(ResponseTime)  AS TodayLastHour by ServiceOperationName| appendcols [search index=* sourcetype="*" SourceSystemID="*"  ="*" ServiceName="*"  ServiceOperationName="*" OR "*" OR "*" OR "* earliest=-25h@h latest=-24h@h | stats Perc90(ResponseTime)  AS YesterdayLastHour by ServiceOperationName]| eval percent_difference=((TodayLastHour-YesterdayLastHour)/YesterdayLastHour*100) 
Tags (1)
0 Karma

woodcock
Esteemed Legend
0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk &#43; Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...