Splunk Search

Tooltip text customization in line chart

sathish2k8
Explorer

I am displaying a line chart and the tool tip text only showing Y axis field. I want to customize the tooltip text that is chart overlay value to third field. Below is my search query 

sourcetype="<website Monitoring>" title="url1" | eval status=case(response_code == 200, "Online",response_code == "", "Offline", response_code ==404, "Not found", response_code == 500, "Internal Server Error") | timechart count by status | eval clust=case(title == "url1", "admin",title == "url2", "Cluster 1") | fields _time clust

I want url to be displayed in the tooltip text (field=clust) Please provide your expertise on how to achieve this. 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...