Splunk Search

visualization

punithjigali
Explorer

in a line chart after reaching a threshold it needs to show in different color how is it ??

0 Karma

niketn
Legend

@punithjigali there should be two series one under Threshold and second with threshold breaches. Once you create that you can have a connected chart on lines similar to the answer below: https://answers.splunk.com/answers/662654/how-to-create-highchart-zones-that-change-the-colo.html

If this is not what you are looking for, please add more context to your question/use case with anonymized data sample, current output and expected output and SPL used!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...