Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About alanxu
alanxu
Communicator
Member since:
06-29-2015
06-05-2020
Community Statistics
| Posts | 105 |
| Solutions | 0 |
| Karma Given | 49 |
| Karma Received | 0 |
| Member Since | 06-29-2015 |
Activity Feed
- Karma Re: How do I make a line graph with my timechart search? for sideview. 06-05-2020 12:47 AM
- Karma Re: Switching my code from Shell to Python and still use Splunk for richgalloway. 06-05-2020 12:47 AM
- Karma Re: Getting odd data uploaded to my Splunk for martin_mueller. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for tskinnerivsec. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for sideview. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for sideview. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for sideview. 06-05-2020 12:47 AM
- Karma Re: My alerts are not sending even though they are being listed under trigger history any ideas why? for alacercogitatus. 06-05-2020 12:47 AM
- Karma Re: Using a timechart, why are all the results not being shown on the dashboard? for acharlieh. 06-05-2020 12:47 AM
- Karma Re: Using a timechart, why are all the results not being shown on the dashboard? for alacercogitatus. 06-05-2020 12:47 AM
- Karma Re: Why does using time range "today" for timechart make it separate into 30 minute intervals? for martin_mueller. 06-05-2020 12:47 AM
- Karma Re: Why does using time range "today" for timechart make it separate into 30 minute intervals? for Richfez. 06-05-2020 12:47 AM
- Karma Re: Why are lines not showing up for line graph? for sideview. 06-05-2020 12:47 AM
- Karma Re: Why are lines not showing up for line graph? for woodcock. 06-05-2020 12:47 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-28-2015
08:19 AM
Ill try it out now. Wow I didnt know you would need to add taht much
... View more
08-27-2015
03:30 PM
So I would want the exact same thing but the SOMESTRINGTOLOOKFOR has an unique completion time. So it would be nice to have both.
... View more
08-27-2015
03:21 PM
It will be a different string i would be looking for.. but yeah looking for completion time too.. When I was looking online they use a comma in time chart but im not sure how I could make it work
... View more
08-27-2015
03:16 PM
That is what I have right now... So I want to add a second line which also has SOMESTRINGTOLOOKFOR and get the exact same data.. The completion_Time
... View more
08-27-2015
03:16 PM
host=.. source =.. SOMESTRINGTOLOOKFOR | timechart latest(TIME) as Completion_Time | eval Completion_Time=tonumber(replace(Completion_Time,"(\d+):(\d+):(\d+)","\1.\2"))
... View more
08-27-2015
03:05 PM
Im not sure if I would want it in seconds. But ill see if there are other commands
... View more
08-27-2015
03:03 PM
Would you know how to add a second line?
host=.. source =.. SOMESTRINGTOLOOKFOR | timechart latest(TIME) as Completion_Time | eval Completion_Time=tonumber(replace(Completion_Time,"(\d+):(\d+):(\d+)","\1.\2"))
... View more
08-27-2015
02:58 PM
Would you know how to add a second line?
... View more
08-27-2015
02:41 PM
Thank you somesoni2! I got the graph!
... View more
08-27-2015
02:28 PM
When I do verbose events show up but no visualizations.
... View more
08-27-2015
02:25 PM
I dont get any results with your line. When I remove timechart there is events. But once I add timechart max(duration) by date nothing vcomes up
... View more
08-27-2015
02:19 PM
The "Payment" string is unique
... View more
08-27-2015
02:10 PM
Whats the 1 and 2 for?
... View more
08-27-2015
02:07 PM
Oh and the _time field wont work well because I extracted TIME from the log file.
... View more
08-27-2015
02:07 PM
Ill try that out right now. Would you know how to do the line graph?
... View more
08-27-2015
01:57 PM
OH! I see.. What was the command again? str..() lol.
... View more
08-27-2015
12:53 PM
This is a table I created using the timechart command. Now, I am trying to make a line graph with this information with date on the x-axis and completion time for the y-axis. If I am able to solve that, I would love to add extra lines to the line graph.
<searchString>host=... source = ... Position="Finished" AND Report | timechart latest(TIME) as Completion_Time</searchString>
<earliestTime>-168h</earliestTime>
<latestTime>$timetoken.latest$</latestTime>
This is inside my dashboard atm. I have a drop down for time at the top.
... View more
08-26-2015
03:21 PM
I will try this right now. Just need to change your answer a little because the informaation given above it off.
... View more
08-26-2015
03:19 PM
Wow Rick Thank you for the response. That was well done!
... View more
08-25-2015
08:18 AM
But I would like to use that time range picker to indicate the amount of days to show.
... View more
08-24-2015
04:40 PM
Hello,
I am trying to create a chart where each row has a different search. I am trying to obtain the completion time (completion time is found in my log, it is not from Splunk) for each row. At the top of my dashboard, I have a drop-down where users can control the time, however, I don't want the latest completion time from the drop-down. I want the completion time for each day showing a number of days depending on the drop-down.
... View more
08-23-2015
07:56 PM
No they do not.
... View more
08-21-2015
02:56 PM
So it will create the duration field would it automatically become a dot on a line graph?
... View more
08-21-2015
01:36 PM
Instead of _time cant I just use TIME?
... View more
