Dashboards & Visualizations

Two y Axis

corematrix
New Member

I have a very simple index which tracks a competitive game. Over the course of the year, people earn points for the top 16 positions switch places. In a CSV I track their Name, rank, score at regular intervals.

Below is a screenshot of my data in a simple table and an example of the kinda of the graph I wish to build.

How would I go about making this?

Name on the right > < Rank on the left
> time along the bottom <

alt text

Tags (1)
0 Karma

corematrix
New Member

Thanks for your idea but it doesn't quite work. Each row appears to only be relevant to it'self, want the x axis to be fixed and the lines to track across the x axis.

How would i sorted it so that the global_rank is in order?

alt text

0 Karma

renjith_nair
Legend

@corematrix, have you selected "Multi-series Mode" on? In that case, each line uses its own series and there wont be any overlap

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

renjith_nair
Legend

@corematrix ,

Does this work for you ?

index=cptracker|timechart latest(global_rank) as global_rank by screen_name

or

 index=cptracker|chart latest(global_rank) as global_rank over _time by screen_name
---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Automated Threat Analysis: Available in ES Premier

Automated Threat Analysis: Centralize and Accelerate Phishing Investigations in Splunk Enterprise ...

What’s New in Splunk AI: Volume 02

Welcome to the second edition of “What’s New in Splunk AI” where we look at the latest and greatest updates, ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...