Splunk Search

Correlation on Rain with Accidents [need improvements]

sbnoobbb
Path Finder

Hi Splunk professional, I have these data displayed on a timechart. Is there anyway I can improve on it ? Is it confusing ? Is it possible to do a selection of layouts (stacked with stacked, line with column) ? Please help me improve timechart. I would want to display nice and meaningful charts. Give me some advises. Thanks !

alt text

1 Solution

Drainy
Champion

Whoa, this is an impossible question. Why? When you approach a new customer the first thing you do is sit down and design some basic dashboards with them. This will be based on requirements and needs of the business, along with use cases.

I have no idea what data you are representing, what the impact is on other services, what I am comparing this against.... you can't ask questions here about how best to represent your data. Thats really down to you to design, show to your users and ask them. If they want improvements they will help you drive them, plus you may want to do some basic statistics.

My closing points, have you tried a line, stacked or other chart? Just try them all and see which ones best represent the data. I quite often find that a single chart ends up better when split into two and perhaps pulldowns added to make it a little more interactive.

View solution in original post

Drainy
Champion

Whoa, this is an impossible question. Why? When you approach a new customer the first thing you do is sit down and design some basic dashboards with them. This will be based on requirements and needs of the business, along with use cases.

I have no idea what data you are representing, what the impact is on other services, what I am comparing this against.... you can't ask questions here about how best to represent your data. Thats really down to you to design, show to your users and ask them. If they want improvements they will help you drive them, plus you may want to do some basic statistics.

My closing points, have you tried a line, stacked or other chart? Just try them all and see which ones best represent the data. I quite often find that a single chart ends up better when split into two and perhaps pulldowns added to make it a little more interactive.

sbnoobbb
Path Finder

Will look at your advises 🙂 Thanks !

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...