Splunk Search

Can I Rename the Variable on a Chart for Predict Command?

andrewkenth
Communicator

Just as it says..

Can I rename the variable on a chart for predict command? Instead of count and prediction(count) I'd like Actual and Estimated.

Thanks!

Tags (1)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust
0 Karma

martin_mueller
SplunkTrust
SplunkTrust
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

It should work inside the box as well, something like this:

... | timechart count as Actual | predict Actual as Estimated

That's basically a rename wrapped into the reporting command.

0 Karma

andrewkenth
Communicator

Not sure why I didn't think of this.. I was looking for an option in predict instead of thinking outside the box! This works:

| rename count as Actual | rename prediction(count) as Estimated

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...