Splunk Search

Data Visualization Collision

zgoda
Explorer

Hi all,

I am having trouble with data visualizations. Two of my data points are layered on top of each other. I have tried adjusting the scale and size of the visualization and can't figure it out. Does anyone know how to fix this collision?

alt text

Thanks in advance

Tags (1)
0 Karma

niketn
Legend

@zgoda, since there are multiple data values present at the same point in chart they will overlay each other. So, your options would be to

1) Split the series using Multi-Series mode from UI > Edit > Format Visualization > General tab. Refer to documentation:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/ColumnBarCharts#Multiple_series_options
https://docs.splunk.com/Documentation/Splunk/latest/Viz/LineAreaCharts#Multiple_series_options
This way series will be plotted in two separate areas within the same chart with their own x-axis.

2) Use CSS to hide the series for either Columns or Overlaid Line series as per your need.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

zgoda
Explorer

Hey nikenilay,

I am new to making dashboards. Do you happen to have some sample css to hide the columns?

Thanks in advance

0 Karma

niketn
Legend

@zgoda, refer to this old answer of mine: https://answers.splunk.com/answers/610389/how-to-display-values-only-for-chart-overlay-field.html

If you are new to CSS you can refer to another answer of mine as to how to begin your CSS Journey within Splunk Dashboards: https://answers.splunk.com/answers/590387/how-do-i-update-panel-color-in-splunk-using-css-1.html

Do try out split to Multi-Series Option as well as suggested in above comment.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

pruthvikrishnap
Contributor

Hi,
Try using the Chart option and in Y-Axis you can change the scale from Log to Linear and add some visualizations to it.
Put 0 in Min Value and 800 for the Max Value.
Let me know if this helps.

0 Karma

zgoda
Explorer

Hi,

Thank you for the suggestions. I tried your suggestions and was unable to correct my problem.

0 Karma
Get Updates on the Splunk Community!

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...