Dashboards & Visualizations

creating a line graph

appmandan
Path Finder

I am having some problems creating a simple line graph outside of the "Advanced Charting" and "Build Report" features. I'm trying to build a simple trendline that shows # of logs per day over a 14 day period. When I try to create the chart in a dashboard panel, it's giving me a bar graph. How do I change the bar graph to a line graph? Is there a parameter I specify in the search?

Also, if anyone knows of any good basic chart making tutorials, I would appreciate it. A lot of topics and examples I'm finding on here are more complex than I'm looking for.

Tags (1)
0 Karma
1 Solution

_d_
Splunk Employee
Splunk Employee

I am not aware of a search command option that allows to specify a type of graph (line, bar, column etc). However, you can edit the XML of that panel to include an option like this:

<chart>
<option name="charting.chart">line</option>
...
</chart>

Hope this helps.

> please upvote and accept answer if you find it useful - thanks!

View solution in original post

_d_
Splunk Employee
Splunk Employee

I am not aware of a search command option that allows to specify a type of graph (line, bar, column etc). However, you can edit the XML of that panel to include an option like this:

<chart>
<option name="charting.chart">line</option>
...
</chart>

Hope this helps.

> please upvote and accept answer if you find it useful - thanks!

appmandan
Path Finder

Thanks, I figured it was something simple.

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...