splunk | charting rules

2
REPORT TYPE SUB TYPE CHART TYPE OPTIONS Trend over Single Series Null Values, Time Range Binning Area Null Values, , Time Range Binning Column Time Range Binning Table Only No scale, Time Range Binning Split Series Stack Mode, Null Values, line display marke Area Stack Mode, Null Values, Time Range Binning Column Stack Mode, Time Range Binning Table Only No scale, Time Range Binning Multiple Seri Null Values, line display marker, Time Rang Column Time Range Binning Table Only No scale, Time Range Binning Top Values Time Range Binning Table Only No scale, Time Range Binning Distributio Top Values Pie # Cat to show before bucketing into "other" Table Only No scale Rare Values Table Only Contingency T Table Only Heat Map Correlation N/A Scatter (defNull Values - omit only, Scale options for Column Table Only Function /Aggregator Menu Null Values Show: Only applies to line and area chart types Count of Events Options: Count Omit (default) Distinct Count Connect Treat as '0' sum min Stack Mode Options max If 100% Stacked, no scale options average / mean Options: median Stacked (default) mode 100% stacked variance - sample Not stacked variance - population standard deviation - sample Scale standard deviation - population linear (default) percentile (1-99) > logarithmic first last range Line Line Line Column Bar Numerical (values forced for catego

Upload: beth-goldman

Post on 16-Apr-2017

211 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: Splunk | Charting Rules

REPORT TYPE SUB TYPE CHART TYPE OPTIONSTrend over time Single Series Line (default) Null Values, Time Range Binning

Area Null Values, , Time Range BinningColumn Time Range BinningTable Only No scale, Time Range Binning

Split Series Line (default) Stack Mode, Null Values, line display marker, Time Range BinningArea Stack Mode, Null Values, Time Range BinningColumn Stack Mode, Time Range BinningTable Only No scale, Time Range Binning

Multiple Series Line (default) Null Values, line display marker, Time Range BinningColumn Time Range BinningTable Only No scale, Time Range Binning

Top Values Time Range BinningTable Only No scale, Time Range Binning

Distribution Top Values Bar (default)Pie # Cat to show before bucketing into "other", No scaleTable Only No scale

Rare Values Table OnlyContingency Tabl Table Only

Heat Map

Correlation N/A Scatter (default)Null Values - omit only, Scale options for x & y axisColumnTable Only

Function /Aggregator Menu Null ValuesShow: Only applies to line and area chart types

Count of Events Options:Count Omit (default)Distinct Count Connect

Treat as '0'summin Stack Mode Optionsmax If 100% Stacked, no scale optionsaverage / mean Options:median Stacked (default)mode 100% stackedvariance - sample Not stackedvariance - populationstandard deviation - sample Scalestandard deviation - population linear (default)percentile (1-99) > logarithmicfirstlastrange

Column (default)

Numerical (values forced for categorical fields)

Page 2: Splunk | Charting Rules

Stack Mode, Null Values, line display marker, Time Range Binning