Splunk® Enterprise

Splunk Dashboard Studio

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Charts

To build any chart, start with a transforming search that generates one or more data series.

A series is a sequence of related data points. These points can be plotted on a chart. For example, each line in a line chart shows one series.

A line chart

When you run a transforming search in Search & Reporting using the Search tab, select Statistics. Review the statistics table to see the series generated. After the first column, each additional column represents a series. A single series search generates two columns. A multiple series search generates three or more columns.

Different chart types are optimized to visualize one or more data series.

Chart name Optimized for single series? Optimized for multiple series? Notes
Pie Yes No Pie charts can only render a single series.
Bar Yes Yes
Column Yes Yes
Line Yes Yes Typically, line charts are used for multiple series.
Area No Yes Use an area chart to render multiple series.
Scatter No Yes Scatter charts work best with two data series.
Bubble No Yes Bubble charts work best with three or 4 data series.
Punchcard No Yes Punchcard charts work best with 3 data series.
Last modified on 22 January, 2021
PREVIOUS
Advanced dynamic options syntax (DOS)
  NEXT
Line and area charts

This documentation applies to the following versions of Splunk® Enterprise: 8.2.1, 8.2.2


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters