Splunk Search

How do I add dot or square markers on my line chart (timeline)?

melonman
Motivator

Hi

I have a simple XML dashboard with 1 panel as line chart showing the following search result:

 * | timechart span=1h count

and XML is:


* | timechart span=1h count
index=me | timechart count
log
line

What I want to do is
1) add markers where data is plotted on Y (count)
2) delete the line so only plotted marker is shown without line

I am looking for this in the Visualization document for 5.0.1, but still can't figure out how to do this.
Also tried to use scatter chart with _time in X axis, but no luck.

Any comment would be appreciated,
Thanks!

Tags (1)
1 Solution

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

View solution in original post

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

melonman
Motivator

alpha is not working for JSchart now, but this is enough for me now. Thanks a lot!

0 Karma
Get Updates on the Splunk Community!

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...