Splunk Search

How do I add dot or square markers on my line chart (timeline)?

melonman
Motivator

Hi

I have a simple XML dashboard with 1 panel as line chart showing the following search result:

 * | timechart span=1h count

and XML is:


* | timechart span=1h count
index=me | timechart count
log
line

What I want to do is
1) add markers where data is plotted on Y (count)
2) delete the line so only plotted marker is shown without line

I am looking for this in the Visualization document for 5.0.1, but still can't figure out how to do this.
Also tried to use scatter chart with _time in X axis, but no luck.

Any comment would be appreciated,
Thanks!

Tags (1)
1 Solution

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

View solution in original post

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

melonman
Motivator

alpha is not working for JSchart now, but this is enough for me now. Thanks a lot!

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...