Splunk Search

How can I create a chart for each column?

madisonAvalos
Engager

I have 10 columns with the name of a server, and each server has its average per day. How can I create a panel for each column that I have? In this case, I need to show 10. Any help? Right now, it only shows me everything all in the same panel.

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Assuming you currently have a single chart with many colours in one chart, have you tried setting "Multi-series Mode" to Yes in the Format menu? That should split each colour out into its own chart.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Assuming you currently have a single chart with many colours in one chart, have you tried setting "Multi-series Mode" to Yes in the Format menu? That should split each colour out into its own chart.

madisonAvalos
Engager

It works! Thank you sooooo much

One last question
So i have 45 servers with own chart.
Can i put the name of the server on the top of each chart?

0 Karma

woodcock
Esteemed Legend

Show the search that is generating the current panel's table.

0 Karma

madisonAvalos
Engager

i have like this:
DAY| Server1 | server 2 | server 3
1 | 2.3 | 3.2 | 1.2
2 | 1.2 | 0.1 | 3.2

my search:
| dbquery "SCOM/SQL" "SELECT datepart(day,interval) [day], convert(dec(12,2),avg(average2)) [avg], ServerName
FROM [Performance].[vw_ServerShortName] JOIN [Performance].[tbl_PeformanceResult] ON [Performance].[tbl_PeformanceResult].Displayname2=[Performance].[vw_ServerShortName].Displayname2 WHERE Performance='Lync' GROUP BY datepart(day,interval), ServerName;
"| sort by day | chart list(avg) by day, ServerName

So i need:

Name: server 1
chart 1 x->Days Y-> Average
server 2
chart2 x-> Days y -> Average

in the same Dashboard maybe in different panels... But 1 chart per Server

Thankyou

0 Karma

renjith_nair
Legend

Sorry didn't get your requirement fully. Do you mean you have server names as field names and each has a row for average, something like below.

server1 server2 ....server10
90 80 60

It will be great if you could share your current search and dashboard and what you want to achieve

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

The Payment Operations Wake-Up Call: Why Financial Institutions Can't Afford ...

The same scenario plays out across financial institutions daily. A payment system fails at 11:30 AM on a busy ...

Make Your Case: A Ready-to-Send Letter for Getting Approval to Attend .conf25

Hello Splunkers, Want to attend .conf25 in Boston this year but not sure how to convince your manager? We've ...

Community Spotlight: A Splunk Expert's Journey

In the world of data analytics, some journeys leave a lasting impact not only on the individual but on the ...