Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- How can I tune the splunk flash chart drawing?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi there,
I have a chart that takes 15+ sec to draw area graph after loading completed. Loading data can be tuned by using summary index, but any way to tune drawing part? The number of data is around 9000 * 3 series.
Thank you!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I just did simple modification span=5min to span=60min. It changed a lot actually. It took 20sec with span=5min v.s. 4sec with span=60min. I noticed that most of the time taken was flash drawing part as I watched my browser.
Thanks.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I just did simple modification span=5min to span=60min. It changed a lot actually. It took 20sec with span=5min v.s. 4sec with span=60min. I noticed that most of the time taken was flash drawing part as I watched my browser.
Thanks.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I just did simple modification span=5min to span=60min. It changed a lot actually. It took 20sec with span=5min v.s. 4sec with span=60min. I noticed that most of the time taken was flash drawing part as I watched my browser. Thanks.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I will simplify the question. I have performance data of CPU/Memory/Disk utilization. Those data is gathered every 5 min. I have been asked to create one timechart based on the following search string:
.. earliest=-1mon@mon latest=@mon | timechart span=5min avg(CPU) avg(Memory) avg(Disk)
I don't thing summary indexing for this doesn't improve the performance because there is span=5min and the data used is gathered every 5min.
Is there any performance tuning method in this case?
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
May 2026 Splunk Expert Sessions: Security & Observability
Network to App: Observability Unlocked [May & June Series]
SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...
