Dashboards & Visualizations

Vertical line in Bubble chart

sssignals
Path Finder

Hi Splunk community

I have a bubble chart generated using the following (x-axis: PortThroughput y-axis: SYSID)
| eventstats avg(PortThroughput) as avg by Port, stdev(PortThroughput) as std by Subsystem
| stats count by Port, PortThroughput, Subsystem
| table Subsystem PortThroughput SYSID count

I wanted to plot a vertical line for at PortThroughput = avg + 3*std but there is no chart overlay. Is this possible using simple xml? Thanks.

Tags (1)
0 Karma

jitendragupta
Path Finder

I am not clear with your full scenario. Please add a screenshot of your final graph. As u said u want to add the third line to the graph, I would suggest using a 3D graph in this case. Check this 3D chart screenshot as per your requirements:

alt text

0 Karma

Anonymous
Not applicable

Sorry for interrupting the answer her, but this chart is amazing.
What does it called, is it an app? How can i aquire this in my Splunk?

0 Karma

jitendragupta
Path Finder

This is 3D Scatterplot - Custom Visualization app for Splunk.
U can download and install it in Splunk from this link:

https://splunkbase.splunk.com/app/3138/

0 Karma

niketn
Legend

@sssignals I had following two options

1) Based on percent location in chart CSS would be able to do this: https://answers.splunk.com/answers/681701/how-to-add-division-line-on-the-scatter-chart.html

2) If you are on Splunk 7x, you can use Chart Annotation: https://answers.splunk.com/answers/736771/can-annotations-be-be-added-manually-without-timec.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

sssignals
Path Finder

Hi @niketnilay

Tried annotation and the error says bubble does not support annotation. Thank you for your suggestion. 😃

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...