Dashboards & Visualizations

Show two plots on chart with different values?

shanecifaldi
Loves-to-Learn Everything

Hello All,

I have some data coming in from NetApp that shows snapshot name and snapshot volume used. I need to show all the volume names/space used from 48 hours ago on-top of one from 24 hours ago. The goal is to show growth of our snapshots each day.

by base search is :

sourcetype=dbx3_netapp_vault_utilization

this will return the below data: (server/host names redacted)
alt text
I need the chart to show the name with Volume Used at 24h and 48 on the same line graph...any help?

Tags (1)
0 Karma

somesoni2
Revered Legend

Assuming that your "Volume Used (GB)" is extracted as a field, you should be able to plot that day by day comparison using timechart-timewrap command combination.
https://docs.splunk.com/Documentation/Splunk/7.1.2/SearchReference/Timewrap

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...