Dashboards & Visualizations

format sparkine as bar for multiple sparkine

k_harini
Communicator

I'm facing issue with formatting sparkine as bar chart for multiple sparklines
index=xxx counter="% Idle time" OR counter="% User Time" |stats sparkline(avg(Value),1h) as Trend avg(Value) as "Avg_Value" by host counter|eval Avg_Value=round(Avg_Value,2)."%"|xyseries host counter "Avg_Value" Trend

I could see sparkline trend values as "Trend:% Idle time" "Trend:% User Time". How to specify this in format tag
Tried this

   <code>
    <format field= "Trend:% Idle time"  type="sparkline">
     <option name="type">bar</option>
   </format>
   </code>

This is not working.. can someone please help

Tags (1)
0 Karma
1 Solution

k_harini
Communicator

This is resolved. I could rename and give in different format tags. Thanks..

View solution in original post

0 Karma

k_harini
Communicator

This is resolved. I could rename and give in different format tags. Thanks..

0 Karma
Get Updates on the Splunk Community!

Get Inspired! We’ve Got Validation that Your Hard Work is Paying Off

We love our Splunk Community and want you to feel inspired by all your hard work! Eric Fusilero, our VP of ...

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...