Splunk Search

Scaling y axis to +/- 5 of data set?

talbot7
Path Finder

Displaying outside temperature with timechart. The graph show 0~100, but my entire data set is 70~90. Is there a way to dynamically (Not static: minimumNumber 65, maximumNumber 95) confine the Y axis of the graph to +/- 5 of the data set?

Tags (3)

bjoernjensen
Contributor

I might miss the point here, but I just had a look with Splunk 6.2.0 on the following _internal-search:

index=_internal earliest=-10m latest=now | eval temp=50+(random()*0.000000020) |search temp=* | table _time temp | timechart span=10s avg(temp) | eventstats min(Temperature) as Minimum max(Temperature) as Maximum

Looks to me timechart does what you would like:
alt text

0 Karma

Ricapar
Communicator

I'm also looking for the same thing here.

It is not uncommon to have data that fluctuates over time, and hard-coding the min/max numbers isn't really a feasible solution.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...