Splunk Search

How to set up a static line on a line timechart and have two y-axes per chart in Splunk 4.3.6?

giovere
Path Finder
  1. Is there a way to have a bold red static line (for example y=100) in a line timechart?

  2. Is it possible to have two y axes per timechart? At the end to have two timelines each of them having its own y-axes.

Using Splunk 4.3.6 and simple XML dashboard.

0 Karma
1 Solution

bmunson_splunk
Splunk Employee
Splunk Employee

Using splunk 4 this is not possible. If you upgrade to at least splunk 6.1 then yes you can.

You can however get a static line quite easily. After your reporting command add the following.

| eval MyField = 100 

View solution in original post

bmunson_splunk
Splunk Employee
Splunk Employee

Using splunk 4 this is not possible. If you upgrade to at least splunk 6.1 then yes you can.

You can however get a static line quite easily. After your reporting command add the following.

| eval MyField = 100 

giovere
Path Finder

thanks, this is good enough for my purposes. Any idea if two axes will be possible in Splunk 6?

0 Karma

bmunson_splunk
Splunk Employee
Splunk Employee

I'm afraid this only came in with version 6.1 and is called chart overlay. You can read about it here.

http://docs.splunk.com/Documentation/Splunk/6.1/Viz/Chartcontrols#Chart_overlay

Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...