Dashboards & Visualizations

Using a heatmap against fieldformated field

behudelson
Path Finder

Hello,

I have a scenario where I want to build a heatmap to show usage of a piece of equipment (lets say a computer), but for each cell in the heatmap I would like to use fieldformat (or a similar solution) to subdivide the data to describe the usage.

Here is an example, I will start with this data:

Day        Hour        Type           Count
Mon        0800        Teacher        1        
Mon        0800        Student        2        
Mon        0900        Teacher        0        
Mon        0900        Student        4    
Mon        1000        Teacher        1        
Mon        1000        Student        2    
Mon        1100        Teacher        0        
Mon        1100        Student        3    
Tue        0800        Teacher        1        
Tue        0800        Student        0    
Tue        0900        Teacher        1        
Tue        0900        Student        2    
Tue        1000        Teacher        0        
Tue        1000        Student        3    
Tue        1100        Teacher        1        
Tue        1100        Student        0
Wed        0800        Teacher        2        
Wed        0800        Student        0    
Wed        0900        Teacher        1        
Wed        0900        Student        2    
Wed        1000        Teacher        0        
Wed        1000        Student        3    
Wed        1100        Teacher        1        
Wed        1100        Student        0

I can chart the data as shown. where the numbers represent Teacher/Student Count:

            0800        0900       1000       1100
Mon         1/2         0/4        1/2        0/3
Tue         1/0         1/2        0/3        1/0
Wed         2/0         1/2        0/3        1/0

Or like so (with a heatmap) where the numbers represent the sum:

           0800         0900         1000         1100
Mon        3            4            3            3
Tue        1            3            3            1
Wed        2            3            3            1

However, I am unable to figure out how to show the first chart with the ratios using a heatmap based on the sums in the second chart.

Thank you for any assistance!

0 Karma

niketn
Legend

@behudelson for the table with Ratio, what is the requirement of your heatmap?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

behudelson
Path Finder

Hi @niketnilay, thank you for responding. The heatmap would get warmer for the sum of the numbers. I essentially want the heatmap of the second chart applied to the first chart. (The second just shows the sum of the numbers from the first).

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Automated Threat Analysis: Available in ES Premier

Automated Threat Analysis: Centralize and Accelerate Phishing Investigations in Splunk Enterprise ...

What’s New in Splunk AI: Volume 02

Welcome to the second edition of “What’s New in Splunk AI” where we look at the latest and greatest updates, ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...