Dashboards & Visualizations

Compare two time ranges with pivot or tstats

Simon
Contributor

Hi all,

how can I compare two timeranges using the commands pivot or stats?

Example:
I wanted to compare last week to the last week a year ago without searching the data between those two ranges, e.g.:

| pivot Mymodel Myobject count(Netatmo_Events) AS anz, avg(temperature) AS temp | eval marker="yesterday" | append [| pivot Mymodel Myobject count(Netatmo_Events) AS anz, avg(temperature) AS temp | eval marker="weekago" ]

Thanks,
Simon

thomrs
Communicator

I use the timewrap app for this, compares ranges via time chart. The stats are also available for viewing.

https://apps.splunk.com/app/1645/

jayannah
Builder

Did you get the solution using pivot? We can't specify time range in pivot command..

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...