Splunk® Enterprise

Analytics Workspace

Data sources in the Data panel in the Analytics Workspace

In the Data panel, you can search or browse for the data source that you want to view in a chart in the main panel of the Analytics Workspace. Filter on metrics data sources to narrow down the data sources that you want to use.

Filter on metrics data sources

To more easily find the data source that you want, click +Add new filter to filter the available data sources. You can filter by different fields and field values, such as by index or host.

For example, first select one or more metric indexes you want to use to filter. Then, select the specific metric and add the chart to your workspace. The chart header shows your filter selections.

Filter on metrics data source indexes by time range

By default, the number of metrics you can see in the data panel is based on the data ingested in the last 15 minutes. For a metric to show in the data panel, the metric must occur at least once within the set time range and the index must have ingested data for that metric within the same time range.

To change the time range for the data panel metrics click on the Last 15 minutes link at the bottom of the data panel, and select a predefined relative time range or set a custom time range using the time range picker. The time range selected here will not affect the global time range for the workspace.

Last modified on 12 November, 2020
Charts in the Analytics Workspace   Analytics in the Analytics Workspace

This documentation applies to the following versions of Splunk® Enterprise: 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.1.10, 8.1.11, 8.1.12, 8.1.13, 8.1.14, 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.2.8, 8.2.9, 8.2.10, 8.2.11, 8.2.12, 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.2.0, 9.2.1, 9.2.2

Was this topic useful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters