Single Value compared with custom option

[valentinv]

Hi!

I monitor a csv file and I need to show the last value from file as Single Value chart.
This last value I want to compare it with the 24 value from file and show the trend.

This can be done (I guess) from query but I don't know how. Basically, Any ideas?

Thank you!

[hunters_splunk]

Hi valentinv,

If you want to show trend over time, you can use the timechart command in your query. For example, the following search displays product purchases over time.

sourcetype=access_* action=purchase | timechart count by product 

So, basically you can timechart your values (each has a timestamp I presume) and visualize them using a line chart to see the trend.
For more details: http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Timechart?r=searchtip

Hope it helps. Thanks!
Hunter