My search query finding MAX, AVG response times of API.
| search ("API-1 call start"
OR "API-1 response status*"
OR "API-1 call failed:*")
| reverse
| stats first(_time) as Start, last(_time) as End by transactionid
| eval duration=End-Start
| stats
max(duration) as "Max",
p95(duration) as "Avg95",
p99(duration) as "Avg99"
Currently I chosen Single value visualisation with Trellis layout & it is looking good to see. But when I export to PDF it's not coming as it has Trellis layout.
I have multiple APIs like this to show like this.
What visualisation is best for these type of data?
splunk default pdf export has this problem where the alignment and data panels get disrupted if the visualization looks good and you want the same to be exported in the pdf you can try the smart pdf exporter in splunk app