Hi,
I think trendline and timewrap are not what I need.
Also I don't want to use 3rd party.
What I did now (and solved a part of the problem):
Created some small txt-Files manually with my historical data (timestamp, and used storage).
So I'am able to get a table with the row (line from 2001 until 2014) and a second row with for each year.
With the EVAL (for converting) and DELTA command I created an new row to calculate my growth.
Also with some more EVAL and STATS I created a row to compare my growth with the market forecast (storage doubling all 2 years).
After that I placed a input field to the panel, so I can set a static value for forecast-year.
So I have all values I need to calculate the growth from 2014 to eg. 2018 or 2020, etc.
The table (and graph) goes now from year 2001 until 2014 and then the next and last row is year 2018.
So I have the right result now.
But it would be fine to see the years between 2014 and 2018 too.
I found no way to create them "dynamicly" (like a for loop).
I did't used TIMECHART, because my historical data _time has not the right stamp in SPLUNK.
I only worked with ... | CHART values(used) by mytime | ...
I created the txt files, because I startet SPLUNK in this environment after 2014.
thx,
sven
... View more