Dashboards & Visualizations

Compare two time ranges with pivot or tstats

Simon
Contributor

Hi all,

how can I compare two timeranges using the commands pivot or stats?

Example:
I wanted to compare last week to the last week a year ago without searching the data between those two ranges, e.g.:

| pivot Mymodel Myobject count(Netatmo_Events) AS anz, avg(temperature) AS temp | eval marker="yesterday" | append [| pivot Mymodel Myobject count(Netatmo_Events) AS anz, avg(temperature) AS temp | eval marker="weekago" ]

Thanks,
Simon

thomrs
Communicator

I use the timewrap app for this, compares ranges via time chart. The stats are also available for viewing.

https://apps.splunk.com/app/1645/

jayannah
Builder

Did you get the solution using pivot? We can't specify time range in pivot command..

0 Karma
Get Updates on the Splunk Community!

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...

Dynamic Links from Alerts to IM Navigators - New in Observability Cloud

Splunk continues to improve the troubleshooting experience in Observability Cloud with this latest enhancement ...