Splunk Search

Single Value Sparklines

craigwilkinson
Path Finder

Hi All,

I've recently created a single value dashboard panel with % trend, and sparkline underneath showing the current Splunk transmission speed, using the following search:

earliest=-24h@h latest=@h index=_internal sourcetype=*splunkd* source=*metrics*  group=per_index_thruput series=*app* OR series=_* |  eval gb=(kb/1024/1024)   | timechart span=1h sum(gb) AS totalGB

However, notice that the sparkline is constantly near zero, as the single value fluctuates around 0.65.

Is there a way to increase the scale/resolution of the sparkline so it will show fluctuations, rather than just showing 0 all the time.

alt text

Thanks,

Craig

gcusello
SplunkTrust
SplunkTrust

Hi craigwilkinson ,
did you tried to change scale (e.g. MB/h instead GB/h)?
Bye.
Giuseppe

0 Karma

gokadroid
Motivator

How about showing the data in MB/h and then seeking that fluctuation if requirement permits.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...