Splunk Search

Add several information on a point

Lucie99
Explorer

Hi everyone,

 

I'm looking for how to add information on a graphical point. My graph shows only an average and an ofnumber. How to add information of the same line like the Date or the bench number for example without add a double or triple x axis ?

 

Thanks

Lucie99_0-1597736737655.png

Lucie99_1-1597736834765.png

 

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
Perhaps you want an annotation? See https://docs.splunk.com/Documentation/Splunk/8.0.5/Viz/ChartEventAnnotations
---
If this reply helps you, Karma would be appreciated.
0 Karma

Lucie99
Explorer

Maybe annotation can work too. 

Have to build the query to show the value of the same line.

I will try and come to you if I have some news

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Automated Threat Analysis: Available in ES Premier

Automated Threat Analysis: Centralize and Accelerate Phishing Investigations in Splunk Enterprise ...

What’s New in Splunk AI: Volume 02

Welcome to the second edition of “What’s New in Splunk AI” where we look at the latest and greatest updates, ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...