Dashboards & Visualizations

Compare two time ranges with pivot or tstats

Simon
Contributor

Hi all,

how can I compare two timeranges using the commands pivot or stats?

Example:
I wanted to compare last week to the last week a year ago without searching the data between those two ranges, e.g.:

| pivot Mymodel Myobject count(Netatmo_Events) AS anz, avg(temperature) AS temp | eval marker="yesterday" | append [| pivot Mymodel Myobject count(Netatmo_Events) AS anz, avg(temperature) AS temp | eval marker="weekago" ]

Thanks,
Simon

thomrs
Communicator

I use the timewrap app for this, compares ranges via time chart. The stats are also available for viewing.

https://apps.splunk.com/app/1645/

jayannah
Builder

Did you get the solution using pivot? We can't specify time range in pivot command..

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...