Splunk Search

Correlation on Rain with Accidents [need improvements]

sbnoobbb
Path Finder

Hi Splunk professional, I have these data displayed on a timechart. Is there anyway I can improve on it ? Is it confusing ? Is it possible to do a selection of layouts (stacked with stacked, line with column) ? Please help me improve timechart. I would want to display nice and meaningful charts. Give me some advises. Thanks !

alt text

1 Solution

Drainy
Champion

Whoa, this is an impossible question. Why? When you approach a new customer the first thing you do is sit down and design some basic dashboards with them. This will be based on requirements and needs of the business, along with use cases.

I have no idea what data you are representing, what the impact is on other services, what I am comparing this against.... you can't ask questions here about how best to represent your data. Thats really down to you to design, show to your users and ask them. If they want improvements they will help you drive them, plus you may want to do some basic statistics.

My closing points, have you tried a line, stacked or other chart? Just try them all and see which ones best represent the data. I quite often find that a single chart ends up better when split into two and perhaps pulldowns added to make it a little more interactive.

View solution in original post

Drainy
Champion

Whoa, this is an impossible question. Why? When you approach a new customer the first thing you do is sit down and design some basic dashboards with them. This will be based on requirements and needs of the business, along with use cases.

I have no idea what data you are representing, what the impact is on other services, what I am comparing this against.... you can't ask questions here about how best to represent your data. Thats really down to you to design, show to your users and ask them. If they want improvements they will help you drive them, plus you may want to do some basic statistics.

My closing points, have you tried a line, stacked or other chart? Just try them all and see which ones best represent the data. I quite often find that a single chart ends up better when split into two and perhaps pulldowns added to make it a little more interactive.

sbnoobbb
Path Finder

Will look at your advises 🙂 Thanks !

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...