Splunk Search

SparkLine Formatting not working

hbpatel142
Engager

Form or Dashboard is not displaying the bar from the below query and configuration. Let me know what I am doing.

<row>
<table>
<searchTemplate>index="XXXXXXXXXX" $ApplicationGroup$ counter="% Processor Time" OR counter="% Committed Bytes In Use" OR counter="Total Method Requests/sec" | stats sparkline(avg(Value)) as Trending, perc90(Value) as value by host , counter </searchTemplate>
<title>Performance Counters by Host</title>
<format field="sparkline" type="sparkline">
<option name="type">bar</option>
<option name="height">30</option>
<option name="barColor">green</option>
</format>
</table>
</row>

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

As per http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#Sparkline_opti... you're referring to the wrong field name in <format field="..."> and there's no option named barColor.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

As per http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#Sparkline_opti... you're referring to the wrong field name in <format field="..."> and there's no option named barColor.

hbpatel142
Engager

Thanks for posting the reference link. I was not passing the field="" value properly and hence it was not working.

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...