Dashboards & Visualizations

format sparkine as bar for multiple sparkine

k_harini
Communicator

I'm facing issue with formatting sparkine as bar chart for multiple sparklines
index=xxx counter="% Idle time" OR counter="% User Time" |stats sparkline(avg(Value),1h) as Trend avg(Value) as "Avg_Value" by host counter|eval Avg_Value=round(Avg_Value,2)."%"|xyseries host counter "Avg_Value" Trend

I could see sparkline trend values as "Trend:% Idle time" "Trend:% User Time". How to specify this in format tag
Tried this

   <code>
    <format field= "Trend:% Idle time"  type="sparkline">
     <option name="type">bar</option>
   </format>
   </code>

This is not working.. can someone please help

Tags (1)
0 Karma
1 Solution

k_harini
Communicator

This is resolved. I could rename and give in different format tags. Thanks..

View solution in original post

0 Karma

k_harini
Communicator

This is resolved. I could rename and give in different format tags. Thanks..

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...