Splunk Search

How to create a time chart that is not based on numerical values?

muralianup
Communicator

I am trying to create a graph for status history of some machine. Values I have are the name of machine & its server health (down/alive) over a time period. This has become tedious because timechart and stats count all involves numbers. So, any suggestions ?

0 Karma

sundareshr
Legend

For your search you could do this

base search | timechart span=1h values(health) AS health by machine

This will give you a tabular result. Look at Splunk 6.x Dashboard Examples app. There is an example for Table Cell Highlighting. See if that might work for you.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...