Splunk Search

How to set up a static line on a line timechart and have two y-axes per chart in Splunk 4.3.6?

giovere
Path Finder
  1. Is there a way to have a bold red static line (for example y=100) in a line timechart?

  2. Is it possible to have two y axes per timechart? At the end to have two timelines each of them having its own y-axes.

Using Splunk 4.3.6 and simple XML dashboard.

0 Karma
1 Solution

bmunson_splunk
Splunk Employee
Splunk Employee

Using splunk 4 this is not possible. If you upgrade to at least splunk 6.1 then yes you can.

You can however get a static line quite easily. After your reporting command add the following.

| eval MyField = 100 

View solution in original post

bmunson_splunk
Splunk Employee
Splunk Employee

Using splunk 4 this is not possible. If you upgrade to at least splunk 6.1 then yes you can.

You can however get a static line quite easily. After your reporting command add the following.

| eval MyField = 100 

giovere
Path Finder

thanks, this is good enough for my purposes. Any idea if two axes will be possible in Splunk 6?

0 Karma

bmunson_splunk
Splunk Employee
Splunk Employee

I'm afraid this only came in with version 6.1 and is called chart overlay. You can read about it here.

http://docs.splunk.com/Documentation/Splunk/6.1/Viz/Chartcontrols#Chart_overlay

Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...