Splunk Search

How to create a search on charting time?

lekshmi279
New Member

I have some users with shift timings (Start and End time in a lookup file). How can I use Splunk to chart their availability? More precisely, I want each user to be in the Y axis and X axis shows time. I want a bar chart showing each of their availability based on their start and end time.
(First time user of Splunk)

0 Karma

nickhills
Ultra Champion

Take a look at this post which describes how to show similar (vacation) data on a calendar view.
https://answers.splunk.com/answers/730878/mark-all-days-from-start-date-to-end-date-as-vacat.html
https://answers.splunk.com/answers/713033/can-we-create-a-vacation-tracker-in-splunk.html

If my comment helps, please give it a thumbs up!
0 Karma

lekshmi279
New Member

Hey @nickhillscpl
Take a loo at which post?

0 Karma

nickhills
Ultra Champion

whoops - sorry! Must have been a copy/paste fail!

If my comment helps, please give it a thumbs up!
0 Karma

lekshmi279
New Member

@nickhillscpl Thank you for your input!
Your solution may not come in as handy for me. I'm looking for a shift schedule format. The examples you gave me were more of handling dates. I want to chart time. Specifically, in 24 hours, I want to mark employees' availability (say from 9AM to 6PM).
Can you help me with that?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...