Splunk Search

Sort by DataStore

lvandeyar
New Member

Hello I have some data that I'd like to make a bar graph by each datastore. Can anyone help? Data below.

{"dataStores":[
    {"name":"DataStore1", "usedSpace": 477, "capacity": 2048,"freeSpace": 1571},
    {"name":"DataStore2", "usedSpace": 479, "capacity": 2049,"freeSpace": 1572}
]}
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Once you've indexed your JSON data, generate the graph using this search command:

index=foo name="DataStore*" | chart min(freeSpace) by name
---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...