Knowledge Management

Is there a way to save sparkline data to a summary index?

richnavis
Contributor

Hello all,

I have created a daily search search that returns summarized rows of data, including a sparkline that I would like to add to a summary index. Is there a way to preserve the sparkline data, or can someone suggest another method for including something that shows the frequency of events for summarized data over time?

0 Karma

avillalba
New Member

Just save it on the summary and do
| makemv delim="," YOUR_SPARKLINE_SI_FIELD

Then you can display it normally.

0 Karma
Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...