How to set up a static line on a line timechart and have two y-axes per chart in Splunk 4.3.6?

[giovere]

1. Is there a way to have a bold red static line (for example y=100) in a line timechart?

2. Is it possible to have two y axes per timechart? At the end to have two timelines each of them having its own y-axes.

Using Splunk 4.3.6 and simple XML dashboard.

[bmunson_splunk · Accepted solution]

Using splunk 4 this is not possible. If you upgrade to at least splunk 6.1 then yes you can.

You can however get a static line quite easily. After your reporting command add the following.

| eval MyField = 100 

[giovere]

thanks, this is good enough for my purposes. Any idea if two axes will be possible in Splunk 6?

[bmunson_splunk]

I'm afraid this only came in with version 6.1 and is called chart overlay. You can read about it here.

http://docs.splunk.com/Documentation/Splunk/6.1/Viz/Chartcontrols#Chart_overlay