Splunk Search

Sort by DataStore

lvandeyar
New Member

Hello I have some data that I'd like to make a bar graph by each datastore. Can anyone help? Data below.

{"dataStores":[
    {"name":"DataStore1", "usedSpace": 477, "capacity": 2048,"freeSpace": 1571},
    {"name":"DataStore2", "usedSpace": 479, "capacity": 2049,"freeSpace": 1572}
]}
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Once you've indexed your JSON data, generate the graph using this search command:

index=foo name="DataStore*" | chart min(freeSpace) by name
---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...