Splunk Search

Data Visualization Collision

zgoda
Explorer

Hi all,

I am having trouble with data visualizations. Two of my data points are layered on top of each other. I have tried adjusting the scale and size of the visualization and can't figure it out. Does anyone know how to fix this collision?

alt text

Thanks in advance

Tags (1)
0 Karma

niketn
Legend

@zgoda, since there are multiple data values present at the same point in chart they will overlay each other. So, your options would be to

1) Split the series using Multi-Series mode from UI > Edit > Format Visualization > General tab. Refer to documentation:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/ColumnBarCharts#Multiple_series_options
https://docs.splunk.com/Documentation/Splunk/latest/Viz/LineAreaCharts#Multiple_series_options
This way series will be plotted in two separate areas within the same chart with their own x-axis.

2) Use CSS to hide the series for either Columns or Overlaid Line series as per your need.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

zgoda
Explorer

Hey nikenilay,

I am new to making dashboards. Do you happen to have some sample css to hide the columns?

Thanks in advance

0 Karma

niketn
Legend

@zgoda, refer to this old answer of mine: https://answers.splunk.com/answers/610389/how-to-display-values-only-for-chart-overlay-field.html

If you are new to CSS you can refer to another answer of mine as to how to begin your CSS Journey within Splunk Dashboards: https://answers.splunk.com/answers/590387/how-do-i-update-panel-color-in-splunk-using-css-1.html

Do try out split to Multi-Series Option as well as suggested in above comment.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

pruthvikrishnap
Contributor

Hi,
Try using the Chart option and in Y-Axis you can change the scale from Log to Linear and add some visualizations to it.
Put 0 in Min Value and 800 for the Max Value.
Let me know if this helps.

0 Karma

zgoda
Explorer

Hi,

Thank you for the suggestions. I tried your suggestions and was unable to correct my problem.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...