Is there a way to have a bold red static line (for example y=100) in a line timechart?
Is it possible to have two y axes per timechart? At the end to have two timelines each of them having its own y-axes.
Using Splunk 4.3.6 and simple XML dashboard.
Using splunk 4 this is not possible. If you upgrade to at least splunk 6.1 then yes you can.
You can however get a static line quite easily. After your reporting command add the following.
| eval MyField = 100
Using splunk 4 this is not possible. If you upgrade to at least splunk 6.1 then yes you can.
You can however get a static line quite easily. After your reporting command add the following.
| eval MyField = 100
thanks, this is good enough for my purposes. Any idea if two axes will be possible in Splunk 6?
I'm afraid this only came in with version 6.1 and is called chart overlay. You can read about it here.
http://docs.splunk.com/Documentation/Splunk/6.1/Viz/Chartcontrols#Chart_overlay