Dashboards & Visualizations

Using Chart Visualisation in classic dashboard need show result in Y-axis

siva_kumar0147
Explorer

Hi all,

I am having two fields as eventfield2and eventfield3with values of eventfield3= LHCP , RHCP ,LHCP & values of eventfield2= RHCP , RHCP ,LHCP . I want a result like as shown .

siva_kumar0147_0-1732789623367.png         Thanks for your time in advance.

 

 

 

Labels (2)
0 Karma

tscroggins
Influencer

Hi @siva_kumar0147,

The simplest solution is to use the Timeline visualization. You'll need to calculation durations in milliseconds between transitions:

| makeresults format=csv data="_time,direction,polarization
1732782870,TX,L
1732782870,RX,R
1732781700,TX,R
1732781700,RX,L"
| sort 0 - _time + direction
| eval polarization=case(polarization=="L", "LHCP", polarization=="R", "RHCP")
| streamstats global=f window=2 first(_time) as end_time by direction
| addinfo
| eval duration=if(end_time==_time, 1000*(info_max_time-_time), 1000*(end_time-_time))
| table _time direction polarization duration

tscroggins_0-1732815134381.png

 

siva_kumar0147
Explorer

@tscroggins Thanks for your answer and spending your time, even if we use makeresults , at every point we need to  mention that CSV data ? 

 

0 Karma

tscroggins
Influencer

Hi @siva_kumar0147,

No, I only use makeresults to generate sample data. The logic from the sort command down drives the visualization.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Charts have numeric scales for the y-axis except things like bubble charts but then the values are numeric so it is unlikely that you can get a chart as you proposed - what are you trying to show (there may be alternative ways of representing the data)

0 Karma

siva_kumar0147
Explorer

@ITWhisperer thanks for your time , we can replace L & R values with some number like L as 9 and R as 10
, then we can make it visualise.  

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...