O'Reilly logo

Splunk 7 Essentials - Third Edition by Betsy Page Sigman, Erickson Delgado, J-P Contreras

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Single-value panels with trends

We will now create two more single-value panels that indicate trend lines. This is useful when you need your viewer to understand the behavior of the data in a very compressed line chart while highlighting the most current value:

  1. Enter dashboard edit mode by clicking on the Edit button.
  2. Create a clone of the Bookings panel. Follow the steps in the previous section.
  3. Add it to the dashboard.
  4. Rename the new panel Errors.
  5. Change the Search String to the following command:
SPL> index=main http_status_code=5* | timechart count
  1. Click on Apply.
  2. Click on the Format Visualization icon.
  3. In the Compared to dropdown, select 1 hour before.
  4. Ensure that Show Sparkline is set to Yes.
  1. Refer to the following screenshot: ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required