Splunk Search

Advance chart question

kailun92
Communicator

I have these data and I would like to create a chart using different location together against temperature (Y-axis) and time (X-axis). See example here https://developers.google.com/chart/interactive/docs/gallery/combochart

Anyone that knows a bit of it, can tell me. It would help me a lot ! Thanks in advance 😃

cloudCover : 0.92
dewPoint : 74.65
humidity : 0.77
icon : partly-cloudy-day
ozone : 269.31
precipIntensity : 0.005
precipProbability : 0.33
precipType : rain
pressure : 1010.97
summary : Mostly Cloudy
temperature: 28.22
windBearing : 73
windSpeed : 3.27
psiAverage : 61
latitude : 1.289732
longitude : 103.81675
location : Redhill

cloudCover : 0.95
dewPoint : 74.59
humidity : 0.77
icon : cloudy
ozone : 269.48
precipIntensity : 0.005
precipProbability : 0.28
precipType : rain
pressure : 1010.99
summary : Overcast
temperature: 28.08
windBearing : 75
windSpeed : 2.99
psiAverage : 61
latitude : 1.353092
longitude : 103.945229
location : Tampines

cloudCover : 0.76
dewPoint : 76.91
humidity : 0.85
icon : partly-cloudy-day
ozone : 269.58
precipIntensity : 0.005
precipProbability : 0.3
precipType : rain
pressure : 1011.11
summary : Mostly Cloudy
temperature: 27.76
visibility : 1.64
windBearing : 72
windSpeed : 2.62
psiAverage : 61
latitude : 1.3975669
longitude : 103.7473389
location : Choa Chu Kang

0 Karma
1 Solution

asimagu
Builder

the command that you are after is

chart func over field_in_X_axis by location

func could be max(temperature), avg(temperature) or any other function you want to calculate on temperature

You need to decide which field you want on the X axis as you did not say that on your question, on the google sample they are using year/month but it depends on what you want to report on

View solution in original post

asimagu
Builder

the command that you are after is

chart func over field_in_X_axis by location

func could be max(temperature), avg(temperature) or any other function you want to calculate on temperature

You need to decide which field you want on the X axis as you did not say that on your question, on the google sample they are using year/month but it depends on what you want to report on

kailun92
Communicator

Thanks !!!

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...