Dashboards & Visualizations

Show data values on a chart from custom series, not from a series that chart is plotted

fpavlovi
Explorer

In splunk charting, there is a property showDataLabels, its options are: all | minmax | none.

It shows data values on a chart. But I need to show data labels on a chart so as their values are from other data series, no that was used for plotting. For example, here i plot by USD series while show data labels from % series:

 Q1Q2Q3
Shop1, USD50100100
Shop1, %25%20%10%
Shop2, USD150400900
Shop2, %75%80% 90%

 

I attach a screenshot of result chart.

Now i do it in MS Excel chart (in attached screenshot, it's a setting  Label Options - Values From Cells). But want to migrate to splunk. Is it possible in Splunk?

Screen Shot 2020-08-17 at 2.05.14 PM.png

Labels (1)
0 Karma

to4kawa
Ultra Champion
| makeresults 
| eval _raw="category,Q1,Q2,Q3
Shop1 USD,50,100,100
Shop1 %,25%,20%,10%
Shop2 USD,150,400,900
Shop2 %,75%,80%,90%" 
| multikv forceheader=1 
| table category Q1 Q2 Q3
| untable category quater value
| xyseries quater category value
| table quater "Shop1 %" "Shop2 %"
| foreach Shop* [ eval "<<FIELD>>"= substr('<<FIELD>>',-3,2)]

like This?

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...