Splunk Search

How can I tune the splunk flash chart drawing?

melonman
Motivator

Hi there,

I have a chart that takes 15+ sec to draw area graph after loading completed. Loading data can be tuned by using summary index, but any way to tune drawing part? The number of data is around 9000 * 3 series.

Thank you!

Tags (1)
0 Karma
1 Solution

melonman
Motivator

I just did simple modification span=5min to span=60min. It changed a lot actually. It took 20sec with span=5min v.s. 4sec with span=60min. I noticed that most of the time taken was flash drawing part as I watched my browser.

Thanks.

View solution in original post

0 Karma

melonman
Motivator

I just did simple modification span=5min to span=60min. It changed a lot actually. It took 20sec with span=5min v.s. 4sec with span=60min. I noticed that most of the time taken was flash drawing part as I watched my browser.

Thanks.

0 Karma

melonman
Motivator

I just did simple modification span=5min to span=60min. It changed a lot actually. It took 20sec with span=5min v.s. 4sec with span=60min. I noticed that most of the time taken was flash drawing part as I watched my browser. Thanks.

0 Karma

melonman
Motivator

I will simplify the question. I have performance data of CPU/Memory/Disk utilization. Those data is gathered every 5 min. I have been asked to create one timechart based on the following search string:

.. earliest=-1mon@mon latest=@mon | timechart span=5min avg(CPU) avg(Memory) avg(Disk)

I don't thing summary indexing for this doesn't improve the performance because there is span=5min and the data used is gathered every 5min.

Is there any performance tuning method in this case?

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...