Dashboards & Visualizations

Threshold Line by date range

njones781
Loves-to-Learn

I am trying to have a threshold line that changes based on the date range.

More specifically I am trending mainframe consumption over a period of time, identifying averages by columns and peaks horizontally by line(as an overlay).  The machine's capacity has changed over the years and want to display that.

Struggling to determine the correct syntax:

|eval <field>=if(<field>...

Would have a "dateA to current" = x, "dateB to date A" = y, "dateC to dateB" = z

Somewhere along those lines.  Thoughts?

Labels (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI &#43; Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...

Splunk Technical Support Is Moving to Cisco Support Tools

Introduction Splunk technical support is transitioning to Cisco’s support environment. This change brings ...