Splunk Search

Data Visualization Collision

zgoda
Explorer

Hi all,

I am having trouble with data visualizations. Two of my data points are layered on top of each other. I have tried adjusting the scale and size of the visualization and can't figure it out. Does anyone know how to fix this collision?

alt text

Thanks in advance

Tags (1)
0 Karma

niketn
Legend

@zgoda, since there are multiple data values present at the same point in chart they will overlay each other. So, your options would be to

1) Split the series using Multi-Series mode from UI > Edit > Format Visualization > General tab. Refer to documentation:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/ColumnBarCharts#Multiple_series_options
https://docs.splunk.com/Documentation/Splunk/latest/Viz/LineAreaCharts#Multiple_series_options
This way series will be plotted in two separate areas within the same chart with their own x-axis.

2) Use CSS to hide the series for either Columns or Overlaid Line series as per your need.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

zgoda
Explorer

Hey nikenilay,

I am new to making dashboards. Do you happen to have some sample css to hide the columns?

Thanks in advance

0 Karma

niketn
Legend

@zgoda, refer to this old answer of mine: https://answers.splunk.com/answers/610389/how-to-display-values-only-for-chart-overlay-field.html

If you are new to CSS you can refer to another answer of mine as to how to begin your CSS Journey within Splunk Dashboards: https://answers.splunk.com/answers/590387/how-do-i-update-panel-color-in-splunk-using-css-1.html

Do try out split to Multi-Series Option as well as suggested in above comment.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

pruthvikrishnap
Contributor

Hi,
Try using the Chart option and in Y-Axis you can change the scale from Log to Linear and add some visualizations to it.
Put 0 in Min Value and 800 for the Max Value.
Let me know if this helps.

0 Karma

zgoda
Explorer

Hi,

Thank you for the suggestions. I tried your suggestions and was unable to correct my problem.

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...