Splunk Search

How to set up a static line on a line timechart and have two y-axes per chart in Splunk 4.3.6?

giovere
Path Finder
  1. Is there a way to have a bold red static line (for example y=100) in a line timechart?

  2. Is it possible to have two y axes per timechart? At the end to have two timelines each of them having its own y-axes.

Using Splunk 4.3.6 and simple XML dashboard.

0 Karma
1 Solution

bmunson_splunk
Splunk Employee
Splunk Employee

Using splunk 4 this is not possible. If you upgrade to at least splunk 6.1 then yes you can.

You can however get a static line quite easily. After your reporting command add the following.

| eval MyField = 100 

View solution in original post

bmunson_splunk
Splunk Employee
Splunk Employee

Using splunk 4 this is not possible. If you upgrade to at least splunk 6.1 then yes you can.

You can however get a static line quite easily. After your reporting command add the following.

| eval MyField = 100 

giovere
Path Finder

thanks, this is good enough for my purposes. Any idea if two axes will be possible in Splunk 6?

0 Karma

bmunson_splunk
Splunk Employee
Splunk Employee

I'm afraid this only came in with version 6.1 and is called chart overlay. You can read about it here.

http://docs.splunk.com/Documentation/Splunk/6.1/Viz/Chartcontrols#Chart_overlay

Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...