Splunk Search

How to add different marker types for different lines in one chart?

bux187
New Member

Hi,
I have 3 lines in 1 chart (average, threshold, total_alarm)
I would like to use different marker types for the 3 different line above.

I have used:

<option name="charting.chart.markerSize">5</option>

but the same marker applied to all 3 lines.

0 Karma

renjith_nair
Legend

@bux187,

<option name="charting.fieldDashStyles"> might be useful for you . Here is a run anywhere example

<dashboard>
  <label>Marker Types</label>
  <row>
    <panel>
      <chart>
        <search>
          <query>index=_internal earliest=-2h |timechart span=20m max(date_second) as Max,avg(date_second) as Avg,min(date_second) as Min</query>
        </search>
        <option name="charting.chart">line</option>
        <option name="charting.drilldown">none</option>
        <option name="refresh.display">progressbar</option>
        <option name="charting.fieldDashStyles"> {"Max": "shortDashDotDot","Avg":"dot","Min":"longDash"}</option>
      </chart>
    </panel>
  </row>
</dashboard>

Reference : chart properties

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...