Dashboards & Visualizations

Using a heatmap against fieldformated field

behudelson
Path Finder

Hello,

I have a scenario where I want to build a heatmap to show usage of a piece of equipment (lets say a computer), but for each cell in the heatmap I would like to use fieldformat (or a similar solution) to subdivide the data to describe the usage.

Here is an example, I will start with this data:

Day        Hour        Type           Count
Mon        0800        Teacher        1        
Mon        0800        Student        2        
Mon        0900        Teacher        0        
Mon        0900        Student        4    
Mon        1000        Teacher        1        
Mon        1000        Student        2    
Mon        1100        Teacher        0        
Mon        1100        Student        3    
Tue        0800        Teacher        1        
Tue        0800        Student        0    
Tue        0900        Teacher        1        
Tue        0900        Student        2    
Tue        1000        Teacher        0        
Tue        1000        Student        3    
Tue        1100        Teacher        1        
Tue        1100        Student        0
Wed        0800        Teacher        2        
Wed        0800        Student        0    
Wed        0900        Teacher        1        
Wed        0900        Student        2    
Wed        1000        Teacher        0        
Wed        1000        Student        3    
Wed        1100        Teacher        1        
Wed        1100        Student        0

I can chart the data as shown. where the numbers represent Teacher/Student Count:

            0800        0900       1000       1100
Mon         1/2         0/4        1/2        0/3
Tue         1/0         1/2        0/3        1/0
Wed         2/0         1/2        0/3        1/0

Or like so (with a heatmap) where the numbers represent the sum:

           0800         0900         1000         1100
Mon        3            4            3            3
Tue        1            3            3            1
Wed        2            3            3            1

However, I am unable to figure out how to show the first chart with the ratios using a heatmap based on the sums in the second chart.

Thank you for any assistance!

0 Karma

niketn
Legend

@behudelson for the table with Ratio, what is the requirement of your heatmap?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

behudelson
Path Finder

Hi @niketnilay, thank you for responding. The heatmap would get warmer for the sum of the numbers. I essentially want the heatmap of the second chart applied to the first chart. (The second just shows the sum of the numbers from the first).

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...