Splunk Search

How to create a search on charting time?

lekshmi279
New Member

I have some users with shift timings (Start and End time in a lookup file). How can I use Splunk to chart their availability? More precisely, I want each user to be in the Y axis and X axis shows time. I want a bar chart showing each of their availability based on their start and end time.
(First time user of Splunk)

0 Karma

nickhills
Ultra Champion

Take a look at this post which describes how to show similar (vacation) data on a calendar view.
https://answers.splunk.com/answers/730878/mark-all-days-from-start-date-to-end-date-as-vacat.html
https://answers.splunk.com/answers/713033/can-we-create-a-vacation-tracker-in-splunk.html

If my comment helps, please give it a thumbs up!
0 Karma

lekshmi279
New Member

Hey @nickhillscpl
Take a loo at which post?

0 Karma

nickhills
Ultra Champion

whoops - sorry! Must have been a copy/paste fail!

If my comment helps, please give it a thumbs up!
0 Karma

lekshmi279
New Member

@nickhillscpl Thank you for your input!
Your solution may not come in as handy for me. I'm looking for a shift schedule format. The examples you gave me were more of handling dates. I want to chart time. Specifically, in 24 hours, I want to mark employees' availability (say from 9AM to 6PM).
Can you help me with that?

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...