- Splunk Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- How to create a search on charting time?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to create a search on charting time?
I have some users with shift timings (Start and End time in a lookup file). How can I use Splunk to chart their availability? More precisely, I want each user to be in the Y axis and X axis shows time. I want a bar chart showing each of their availability based on their start and end time.
(First time user of Splunk)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Take a look at this post which describes how to show similar (vacation) data on a calendar view.
https://answers.splunk.com/answers/730878/mark-all-days-from-start-date-to-end-date-as-vacat.html
https://answers.splunk.com/answers/713033/can-we-create-a-vacation-tracker-in-splunk.html
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hey @nickhillscpl
Take a loo at which post?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
whoops - sorry! Must have been a copy/paste fail!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@nickhillscpl Thank you for your input!
Your solution may not come in as handy for me. I'm looking for a shift schedule format. The examples you gave me were more of handling dates. I want to chart time. Specifically, in 24 hours, I want to mark employees' availability (say from 9AM to 6PM).
Can you help me with that?
Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!
They're back! Join the SplunkTrust and MVP at .conf24
Enterprise Security Content Update (ESCU) | New Releases
