Dashboards & Visualizations

Why does Radical chart not updates as per result query?

Sekhar
Explorer

Inde= x source=xtype | table _time bank | bucket span =1sec _time | stats count as pps by _time | timechart span=1 hr  max(pps)  as "maxpps" 

 

_time.  Max pps  columns getting output but radical chart not navigated panel  

Labels (1)
Tags (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

You just need a single value from your search - depending on what you are trying to show, try this

Inde= x source=xtype | table _time bank | bucket span =1sec _time | stats count as pps by _time | timechart span=1 hr  max(pps)  as "maxpps" | stats max(maxpps) as maxpps

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

I am not clear what you mean by "radical chart not navigated panel". What is a "radical" chart? Where are you navigating from? Please can you explain more what you are trying to do and what you expect to see?

0 Karma

Sekhar
Explorer

16919943603872301643195354783393.jpg

 this radical chart my result showing 1 or 10 but nagivatiom pointer shows only 0

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You just need a single value from your search - depending on what you are trying to show, try this

Inde= x source=xtype | table _time bank | bucket span =1sec _time | stats count as pps by _time | timechart span=1 hr  max(pps)  as "maxpps" | stats max(maxpps) as maxpps
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...