We will now use one of the simpler yet powerful visualizations Splunk offers, the single value with trending sparkline:
- Go back to the Datasets list and open a Pivot for Booking Confirmation.
- Change your time range to Last 24 hours. That's all you need to do here.
- Go ahead and click on the Single Value visualization option as indicated here:
- The initial default result is a single number, but we can add context with a Sparkline. In the Sparkline section, click on Add Sparkline; then select _time. Change the Periods to Hours as shown here:
- Splunk provides a great visualization with very few steps and ...