Splunk Dev

Visualization for data with large difference in values.

GenericSplunkUs
Path Finder

I can't seem to find the right terms to search to find my answer so I'm hoping someone here can help me.

I'm looking for a clean way to do the timechart command when your field values could be 5 or 500,000. With such a large difference it makes plotting them on a map useless for the smaller numbered results. I would do this to a table, but it's nice to have the timechart command show the usage over time and make it a good visual reference.

If you have another way to do this, or another command I should use that would be great.

Thanks,

Tags (1)
0 Karma
1 Solution

DalJeanis
SplunkTrust
SplunkTrust

Go ahead and use timechart. Change the visualization format for the Y axis to log.

View solution in original post

DalJeanis
SplunkTrust
SplunkTrust

Go ahead and use timechart. Change the visualization format for the Y axis to log.

GenericSplunkUs
Path Finder

Thank you, this is exactly what I wanted. I knew it had to be a simple option i just couldn't find.

0 Karma

DalJeanis
SplunkTrust
SplunkTrust

Yw. @GenericSplunkUser - if your question has been answered, then please accept the answer so the question will show as solved.

0 Karma

GenericSplunkUs
Path Finder

I thought i had done that, Thanks for the reminder.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...