Splunk Enterprise

Dashboard Studio Single Value with Trendlines

chrisboy68
Contributor

Hi, struggling to get single values to show with trendline comparing to previous month.

 

| bin span=1mon _time
| chart sum(cost) as monthly_costs over bill_date 

 

Tried differnt varations. The above will show a single value for each month, but I want to add a trendline to the single value to compare to the previous month. Any ideas?

Thanks!

Labels (1)
0 Karma

chrisboy68
Contributor

Hi, this https://docs.splunk.com/Documentation/Splunk/9.4.0/DashStudio/trellisLayout.  Specifly like this sample.  With each month, cost and the trend line comparing to previous month.

chrisboy68_0-1738005216924.png

 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

So far, you have only mentioned 2 dimensions, cost and time - what else are you breaking your statistics down by?

0 Karma

chrisboy68
Contributor

This is probably why I'm getting confused.

Jan100
Feb105
March90

 

Given this table, I want to have a single value trellis view that depicts the month total , with a trend compared to the previous month.

Jan 100 (no trend) , Feb 105 (shows trend up 5), March 90 (shows trend down 15).

I'm going to play with timewrap, maybe I'm going down the wrong path.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| bin span=1mon _time
| chart sum(cost) as monthly_cost over _time
0 Karma

chrisboy68
Contributor

Keep getting "Select a valid trellis split by field", used "_time" and tried "monthly_cost" . 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

"Trellis"? Where did that come from? Please clarify what you are actually trying to do?

0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...