Splunk Search

single value chart (as a progress bar)

ra01
Path Finder

Using the example search:

testId=1 | stats count(sessionIDs)

that returns a single value, I'd like to present it in a horizontal bar chart as a progress bar for a test we're running.

If I use a "by" statement the chart works, (ex: count BY experienceID), but I want the total count as the only number charted.

I'm planning to make the max value of the chart the sessions we need before the test ends.

0 Karma

woodcock
Esteemed Legend

show some sample events and the a mockup of the desired visualization. I do not get it.

0 Karma

sundareshr
Legend

Try this

.... | eval x="" | stats count(sessionIDs) as cnt by x
0 Karma
Get Updates on the Splunk Community!

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...

What’s New in Splunk Observability Cloud: January Feature Highlights & Deep Dives

Splunk Observability Cloud continues to evolve, empowering engineering and operations teams with advanced ...