The scatterplot matrix visualization allows comparison between numeric sets of data, giving a rough idea if there is a linear correlation between multiple fields. The scatterplot matrix consists of Rows and Columns of individual Scatterplots that plot an X and a Y value. These values come from the fields sent from the search bar.
The scatterplot matrix could be considered a table of sorts. Each row compares data against the column. So for each label (or field) that is displayed, follow the label to the scatterplot, and that is what is being compared. For example, the top right box of the example on this dashboard compares avg_kbps (Y axis) to stdevp_kbps (X axis). The bottom left box compares avg_kbps (X axis) to stdevp_kbps (Y axis). The axis are switched, and give a different visualization of the data. Additionally, the graph supports some interactivity. Click and drag over a portion of a scatterplot, and the same XY coordinates in the other plots will also be highlighted, and the legend will reflect the items within that highlight. Mouseover the legend items, and the corresponding data points will be highlighted in the scatter plots. You can find more information for Scatterplot Matricies at the links below.
[[Learning Omics | https://learningomics.wordpress.com/2013/01/31/scatterplot-matrices/ ]]
[[Engineering Statistics Handbook | http://www.itl.nist.gov/div898/handbook/eda/section3/eda33qb.htm]]
Scatterplot Matrix has many different configuration options, each split into similar sections. The options are displayed like this:
Show One-to-One Data
index=_internal component=Metrics group=per_sourcetype_thruput | bin _time span=1h | stats avg(kbps) as avg_kbps avg(eps) as avg_eps avg(ev) as avg_ev by series _time | fields - _time_
index=_internal component=Metrics group=per_sourcetype_thruput | stats avg(kbps) as avg_kbps avg(kb) as kb avg(eps) as avg_eps avg(ev) as avg_ev by series
|makeresults | eval data = "0,8;0,7;1,7;1,5;3,4;4,2,4,5;3,6;1,8;2,9", recs = split(data,";") | mvexpand recs | eval t = split(recs, ","), X = mvindex(t,0), Y = mvindex(t,1), series = "person" | fields series X Y | fields - _*
Please ask a question on Answers. Tag it with "aplura_viz" to get noticed.
Support URL: answers.splunk.com
Updated to have a more responsive design, and to support trellis.
Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.