Dashboards & Visualizations

Using a heatmap against fieldformated field

behudelson
Path Finder

Hello,

I have a scenario where I want to build a heatmap to show usage of a piece of equipment (lets say a computer), but for each cell in the heatmap I would like to use fieldformat (or a similar solution) to subdivide the data to describe the usage.

Here is an example, I will start with this data:

Day        Hour        Type           Count
Mon        0800        Teacher        1        
Mon        0800        Student        2        
Mon        0900        Teacher        0        
Mon        0900        Student        4    
Mon        1000        Teacher        1        
Mon        1000        Student        2    
Mon        1100        Teacher        0        
Mon        1100        Student        3    
Tue        0800        Teacher        1        
Tue        0800        Student        0    
Tue        0900        Teacher        1        
Tue        0900        Student        2    
Tue        1000        Teacher        0        
Tue        1000        Student        3    
Tue        1100        Teacher        1        
Tue        1100        Student        0
Wed        0800        Teacher        2        
Wed        0800        Student        0    
Wed        0900        Teacher        1        
Wed        0900        Student        2    
Wed        1000        Teacher        0        
Wed        1000        Student        3    
Wed        1100        Teacher        1        
Wed        1100        Student        0

I can chart the data as shown. where the numbers represent Teacher/Student Count:

            0800        0900       1000       1100
Mon         1/2         0/4        1/2        0/3
Tue         1/0         1/2        0/3        1/0
Wed         2/0         1/2        0/3        1/0

Or like so (with a heatmap) where the numbers represent the sum:

           0800         0900         1000         1100
Mon        3            4            3            3
Tue        1            3            3            1
Wed        2            3            3            1

However, I am unable to figure out how to show the first chart with the ratios using a heatmap based on the sums in the second chart.

Thank you for any assistance!

0 Karma

niketn
Legend

@behudelson for the table with Ratio, what is the requirement of your heatmap?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

behudelson
Path Finder

Hi @niketnilay, thank you for responding. The heatmap would get warmer for the sum of the numbers. I essentially want the heatmap of the second chart applied to the first chart. (The second just shows the sum of the numbers from the first).

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...