Dashboards & Visualizations

how to make sparkline and barchart in 1 dashboard

alexspunkshell
Contributor

I want to display splarkline and its corresponding bar chart in single dashboard.
(Example) sourcetype=xxx index=yyy | |stats sparkline count by branch_location_code
Here i am receiving sparkline i want also barchart. When i change the visualization to bar chart then unable to see sparkline.
Please help here.

0 Karma

sandeepmakkena
Contributor

Please paste your xml code so that people here can help you better.

0 Karma

FrankVl
Ultra Champion

How do you envision showing a barchart incl. sparklines? Because that stats command gives a sparkline for each branch_location_code.

Probably the easiest would be to have 2 panels. One with the total count by branch_location_code visualized in a bar chart and one that does a sourcetype=xxx index=yyy | timechart count by branch_location_code to show the count by branch_location_code over time (just like a sparkline does).

0 Karma

paulbannister
Communicator

Hi There,

I'm not sure it is possible at all to have a sparkline over a bar chart, one solution would be to create 2 panels on the dashboard, one displaying the bar chart and then a panel beneath displaying the sparkline, either that or you could amend the SPL slightly and utilise the Chart Overlay function to display another line over the Bar Chart... it all depends on what you want to display

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...