About AndreasLasses

AndreasLasses · ‎05-23-2023

It does give me a trendline, so the suggestion is not wrong. The issue is that these logs are created infrequently and there can sometimes be several days where no updates are happening and some days more than one update will be done on several repos. So what I get here will be the summary of the last day when an update happened, and only for those particular repos that were updated on that day. What I would want is the summary of the latest run for each repo aggregated in a value with a trendline, regardless of the day it was updated. Now that I am writing my issue I realize that this will probably be next to impossible to achieve without somehow manipulating the data I send to Splunk.

AndreasLasses · ‎05-23-2023

Thank you for your answer. Maybe I wasn't clear enough. So what I want to do is I want to retrieve the values from EACH repo and add the values together into a new value. If repo1 and repo2 boh have "Summary" of 5, I want the aggregated value to show 10. This I have already achieved with the aforementioned query, but what I have not achieved is getting a trendline for this value.

AndreasLasses · ‎05-23-2023

Hello! I am currently trying to create a dashboard (Splunk Enterprise Dashboard Beta) where I aggregate values from multiple repositories in a single value panel to get a total value. My issue is that I want to have a trendline of these aggregated values. Is there a way to achieve this? My current (non-trendline) query looks like this: index="my-index" repo= * |chart latest(***.***.***.Summary) as "Summary" by repo | eval total = sum(Summary) | stats sum(Summary) as "Aggregated Summary" Thanks in advance.

AndreasLasses · ‎04-05-2023

Thank you so much for this @woodcock ! And let's say I want the days in descending order and the week still in ascending?

AndreasLasses · ‎04-05-2023

Hello! I am trying to create a punch card panel in a dashboard. I want to sort the X field on week number in ascending order and the Y on weekday in ascending order. My issue is that however I formulate the query, one of the axises will be in descending and the other in ascending. Here is my query: index="*******" sourcetype=_json | stats latest(Number_of_Commits) as Commits by week Day | eval week_sort = case( Day=="Monday", 1, Day=="Tuesday", 2, Day=="Wednesday", 3, Day=="Thursday", 4, Day=="Friday", 5, Day=="Saturday", 6, Day=="Sunday", 7 ) | eval sort_field = week_sort*10 + case( Day=="Monday", 1, Day=="Tuesday", 2, Day=="Wednesday", 3, Day=="Thursday", 4, Day=="Friday", 5, Day=="Saturday", 6, Day=="Sunday", 7 ) | sort sort_field week_sort The result of this query is as follows: What am I missing to make both X & Y axises sort in ascending order? Thanks in advance

Posts	5
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎04-05-2023

Online Status	Offline
Date Last Visited	‎05-23-2023 08:53 AM

How to create trendline for aggregated values?

Creating a punch card panel on dashboard and sorti...

Re: Trendline for aggregated values

Re: Trendline for aggregated values

How to create trendline for aggregated values?

Re: Creating a punch card panel on dashboard and s...

Creating a punch card panel on dashboard and sorti...