Splunk Search

How to create a search on charting time?

lekshmi279
New Member

I have some users with shift timings (Start and End time in a lookup file). How can I use Splunk to chart their availability? More precisely, I want each user to be in the Y axis and X axis shows time. I want a bar chart showing each of their availability based on their start and end time.
(First time user of Splunk)

0 Karma

nickhills
Ultra Champion

Take a look at this post which describes how to show similar (vacation) data on a calendar view.
https://answers.splunk.com/answers/730878/mark-all-days-from-start-date-to-end-date-as-vacat.html
https://answers.splunk.com/answers/713033/can-we-create-a-vacation-tracker-in-splunk.html

If my comment helps, please give it a thumbs up!
0 Karma

lekshmi279
New Member

Hey @nickhillscpl
Take a loo at which post?

0 Karma

nickhills
Ultra Champion

whoops - sorry! Must have been a copy/paste fail!

If my comment helps, please give it a thumbs up!
0 Karma

lekshmi279
New Member

@nickhillscpl Thank you for your input!
Your solution may not come in as handy for me. I'm looking for a shift schedule format. The examples you gave me were more of handling dates. I want to chart time. Specifically, in 24 hours, I want to mark employees' availability (say from 9AM to 6PM).
Can you help me with that?

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...