Splunk Search

How to see charts result real time

disha
Contributor

I am drawing a line chart of Memory usage. If User select time as last 15 min or anything..how I can refresh the page so that the line chart is keep adding the new coming values for new time..
My search here..


line
connect
Time Stamp
Avg(Memory Usage)(MB)
bottom


300px
true
....
How to autorefresh the chart for new timestamps..as data is coming in every 30 seconds.
Please suggest.
Thanks

Tags (1)
0 Karma
1 Solution

jonuwz
Influencer

The simplest way would be to refresh the whole page every so often by setting the refresh parameter in the advancedxml :

<view isVisible="true" refresh="60" template="dashboard.html">

Another alternative would be to configure the search in the chart to be realtime like this :

  <module name="HiddenSearch">
    <param name="search">* | timechart count</param>
    <param name="latest">rt</param>
    <param name="earliest">rt-60m</param>
    <module name="HiddenChartFormatter">
      <param name="charting.chart">line</param>
      <module name="JSChart"/>
    </module>
  </module>

Failing that, search for AutoRefresh in splunk-base for a custom module that will refresh modules on a page on a set interval

View solution in original post

jonuwz
Influencer

The simplest way would be to refresh the whole page every so often by setting the refresh parameter in the advancedxml :

<view isVisible="true" refresh="60" template="dashboard.html">

Another alternative would be to configure the search in the chart to be realtime like this :

  <module name="HiddenSearch">
    <param name="search">* | timechart count</param>
    <param name="latest">rt</param>
    <param name="earliest">rt-60m</param>
    <module name="HiddenChartFormatter">
      <param name="charting.chart">line</param>
      <module name="JSChart"/>
    </module>
  </module>

Failing that, search for AutoRefresh in splunk-base for a custom module that will refresh modules on a page on a set interval

disha
Contributor

Thankyou So much. AutoRefresh is the module..I was looking for. Thanks for guiding me in right direction.
Thanks

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...