Splunk Search

Bar Chart Line length change

ayush1906
Communicator

My current search output showing the following result, for one entry it is greater than the rest.

I want to show the graph will the greater value , Its length be less so my chart is in proportions.

Current Values
10
20
5000
30
40

Expected Bar chart
10 ======
20 ============
5000 ======================= (5000)
30 ==================

Since i cant upload my graph link. tries to represent using "== "

Current graph image uplaoded on public domain : ibb.co/d5w3Vfy

0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

Use log scale on y axis. That's the solution.

View solution in original post

0 Karma

jkat54
SplunkTrust
SplunkTrust

Use log scale on y axis. That's the solution.

0 Karma

ayush1906
Communicator

yeah, I tried that only. It works for now.

But was wondering if splunk allows changing the length of a particular bar.

0 Karma

jkat54
SplunkTrust
SplunkTrust

Only if you do something like dividing the count by 10 etc.

It would confuse your users though if the scale was 1:1 for 9 bars and 1:10 for 1 bar.

0 Karma

ayush1906
Communicator

Edit: For now I have used Scale = Log instead of linear

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...