Splunk Search

How do I add dot or square markers on my line chart (timeline)?

melonman
Motivator

Hi

I have a simple XML dashboard with 1 panel as line chart showing the following search result:

 * | timechart span=1h count

and XML is:


* | timechart span=1h count
index=me | timechart count
log
line

What I want to do is
1) add markers where data is plotted on Y (count)
2) delete the line so only plotted marker is shown without line

I am looking for this in the Visualization document for 5.0.1, but still can't figure out how to do this.
Also tried to use scatter chart with _time in X axis, but no luck.

Any comment would be appreciated,
Thanks!

Tags (1)
1 Solution

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

View solution in original post

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

melonman
Motivator

alpha is not working for JSchart now, but this is enough for me now. Thanks a lot!

0 Karma
Get Updates on the Splunk Community!

New Splunk Observability innovations: Deeper visibility and smarter alerting to ...

You asked, we delivered. Splunk Observability Cloud has several new innovations giving you deeper visibility ...

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...