Developing Dashboards, Views, and Apps for Splunk Web

 


Custom charting configurations

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

Custom charting configurations

Splunk's charting engine is built on Flash. You can use the Flash interface to communicate with the charting engine and customize your chart. If you've added a chart to your view, you can change how it displays with the following options.

Chart options

This is not an exhaustive list of all chart options, but these are the most commonly changed settings.

Chart type and mode

Change your chart type and display mode.

Legend and titles

Add titles to your chart and axes. Set legend placement.

Scale and range

Set the scale and range for primary and secondary axes.

Chart markup

Set colors for your chart. Toggle on and off markers.

Examples

For example:

<chart>
  <searchString>index=_internal metrics group="pipeline" NOT sendout | head 1000 | timechart per_second(cpu_seconds) by processor</searchString>
  <earliestTime>-30h</earliestTime>
  <latestTime>-10h</latestTime>
  <option name="charting.chart">line</option>
  <option name="charting.primaryAxisTitle.text">Time</option>
  <option name="charting.secondaryAxisTitle.text">Load (%)</option>
</chart>

This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10 , 4.0.11 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.