Splunk Search

Single Value Sparklines

craigwilkinson
Path Finder

Hi All,

I've recently created a single value dashboard panel with % trend, and sparkline underneath showing the current Splunk transmission speed, using the following search:

earliest=-24h@h latest=@h index=_internal sourcetype=*splunkd* source=*metrics*  group=per_index_thruput series=*app* OR series=_* |  eval gb=(kb/1024/1024)   | timechart span=1h sum(gb) AS totalGB

However, notice that the sparkline is constantly near zero, as the single value fluctuates around 0.65.

Is there a way to increase the scale/resolution of the sparkline so it will show fluctuations, rather than just showing 0 all the time.

alt text

Thanks,

Craig

gcusello
SplunkTrust
SplunkTrust

Hi craigwilkinson ,
did you tried to change scale (e.g. MB/h instead GB/h)?
Bye.
Giuseppe

0 Karma

gokadroid
Motivator

How about showing the data in MB/h and then seeking that fluctuation if requirement permits.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...