Possibly a silly question, but I've wondered this for a while and now it'd actually be exactly what I need; I've got a simple http traffic monitor dash, with a graph of status message counts. Underne...
See more...
Possibly a silly question, but I've wondered this for a while and now it'd actually be exactly what I need; I've got a simple http traffic monitor dash, with a graph of status message counts. Underneath, I want a panel which summarises it but ideally in 1m bins per row eg. 9:00AM - [OK] = 500 [Too many open files] = 30 [Connection timed out] = 2 [Connection refused] = 1 - 9:01AM - [OK] = 459 [Too many open files] = 21 [Connection timed out] = 3 [Connection refused] = 2 - 9:02AM etc. Now obvs this is a trivial stats query with a little finessing, which I've added to my dashboard as a statistics panel underneath the graph of the counts over an hour. This achieves a common monitoring goal. I've got the hour span graph and then at-a-glance reference with 5x1min snap shots of what the web server is experiencing currently.. However, the output of a stats panel doesn't exactly look the greatest as above, what I'm actually wondering is, can I make it appear like the attached image below of the bubble popup (not sure what you guys call this), when you click on any field within a Splunk search? Like that output is perfect at-a-glance detail, count, %, and a visual bar etc. It's exactly what i'm poorly trying to replicate with my stats panel, and tbh what I've poorly replicated in many other situations. Can I replicate that in a dash somehow? Have wanted to ask this for a while...