Example of a bubble chart

Question

Is there an example of the correct xml syntax to use to define a bubble chart in a dashboard? I cannot find one in the manuals.

Accepted Answer

3

Managed to puzzle it out, here is my example:

    <chart>
      <searchString>
sourcetype="transactions"  
  | bucket _time span=1h
  | stats count(eval(Rsp!="00")) as declines, count by _time, Region
  | eval pct=round((declines/count) * 100, 2)
  | table Region, _time, pct, declines
      </searchString>
      <title>Percentage declines by Region, last 48h</title>
      <earliestTime>-48h@h</earliestTime>
      <latestTime>now</latestTime>
      <option name="charting.chart">bubble</option>
    </chart>

link

answered 31 May '11, 06:05

raoul
137●15
accept rate: 100%

edited 01 Jun '11, 01:23

<chart> <searchstring> sourcetype="E:\New Folder\voice_cdr_1mil.csv" NOT "CallingCellID" TerminationReason!=1 | |bucket TimeStamp span=5h| eval Base_Transceiver_Station_Code=substr(CallingCellID,11,4) | join Base_Transceiver_Station_Code [search source="E:\New Folder\BTS_Information2.txt"] | table TERRITORY,TimeStamp,TerminationReason </searchstring> <option name="charting.chart">bubble</option> </chart>

i am joining two files here and the result i need as bubble chart but i am not getting any output .. is this code is correct? please help me out

(27 Feb, 22:51) renuka13

Example of a bubble chart

Follow this question

Splunk Resources

Related questions