Splunk Search

How do I get my SPLUNK csv excel data to display via a horizontal bar chart?

vstrash
New Member

My data displays in splunk and ![I was able to generate a correct table via running the command index=cmadam host=kot source= "/media/sf_aaa/log1.csv" | multikv | table PRODUCT_ID_, CDC_DVN_VERSION_, SUM_VALUE_ which covers all my needed variables at the moment. My goal is a table similar to thisalt text
When I press visualization I create a graph where the axis are correctly labeled, but no bars show up. What commands are best for creating this visualizations. I'd like the x to be CDC_DVN_VERSION_ and the y to be SUM_VALUE_ which can be filtered by a changing PRODUCT_ID_ later to be defined. Thanks.

Tags (1)
0 Karma

somesoni2
SplunkTrust
SplunkTrust

For your bar chart, you can use commands like these

your base search | stats sum("SUM_VALUE_") as SUM_VALUE by CDC_DVN_VERSION_ 

OR

your base search | chart sum("SUM_VALUE_") as SUM_VALUE by CDC_DVN_VERSION_ 

To add PRODUCT_ID_, as filter, create a form input with token productid and use the token as filter in your base search

your base search PRODUCT_ID_="$productid$" | chart sum("SUM_VALUE_") as SUM_VALUE by CDC_DVN_VERSION_ 

See this for examples for how to create form/form input.
http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Buildandeditforms

0 Karma

vstrash
New Member

The above chart is what I hope to mimic or create similar to.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...