Splunk Search

How do I add dot or square markers on my line chart (timeline)?

melonman
Motivator

Hi

I have a simple XML dashboard with 1 panel as line chart showing the following search result:

 * | timechart span=1h count

and XML is:


* | timechart span=1h count
index=me | timechart count
log
line

What I want to do is
1) add markers where data is plotted on Y (count)
2) delete the line so only plotted marker is shown without line

I am looking for this in the Visualization document for 5.0.1, but still can't figure out how to do this.
Also tried to use scatter chart with _time in X axis, but no luck.

Any comment would be appreciated,
Thanks!

Tags (1)
1 Solution

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

View solution in original post

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

melonman
Motivator

alpha is not working for JSchart now, but this is enough for me now. Thanks a lot!

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...