We want to produce correlations between two different (timestamp,value) series. We basically want to plot one value against the other and show the results on a chart.
We can get the data we want in a table like this:
As you can see in the example above, we can have gaps (nulls) in the data, corresponding to timestamps when either one or the other series does not have a recorded value.
Can Splunk fill in those gaps by interpolating the missing values? How?
After doing this we would get a table like this:
where x3_interp and y2_interp are values obtained by doing some interpolation on the x and y series (Spline, linear etc).
The we would apply "| chart v1 by v2" to see the graph.
... View more