icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Splunkbase will be undergoing a scheduled migration and will be unavailable on Saturday, Oct 1, 2022, from 11AM to 3PM PDT

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Performance Analysis Viz
SHA256 checksum (performance-analysis-viz_140.tgz) d3a72ac7a50b6fbdbb434942565be32e19544fff55625fc33248992e786b1d0c SHA256 checksum (performance-analysis-viz_130.tgz) cf6d6d9912b5e1320dfd9eb06f6ebeb8c12f187a38b4ff296ec72bd99c6dd33b SHA256 checksum (performance-analysis-viz_120.tgz) 062144f59271419bdbc9ad8b588a13d3083ec35bbeed5f2f7912a636c3d5da67 SHA256 checksum (performance-analysis-viz_110.tgz) 0cc5baf179676ac491de56fadfc659525ad07da426dc7a94fdd068485ca60fbc
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

splunk

Performance Analysis Viz

Splunk Cloud
Overview
Details
The Performance Analysis Visualization allows you to compare two related metrics over time in a tabular format. Use cases include comparing your infrastructure and application health, showing performance and availability of synthetic monitoring scripts, and tracking build status vs code commits over time. This app provides a visualization that you can use in your own apps and dashboards.

Daniel Spavin
daniel@spavin.net
I am a Splunk Professional Services consultant working for JDS Australia (https://www.jds.net.au), in Melbourne Australia.

What does the app do?

The Performance Analysis Visualization allows you to compare two related metrics over time in a tabular format. Use cases include comparing your infrastructure and application health, showing performance and availability of synthetic monitoring scripts, and tracking build status vs code commits over time. This app provides a visualization that you can use in your own apps and dashboards.

Who is this app for?

  • This app is for anyone who wants to show how two related metrics vary over time in a tablular format.

How does the app work?

  • This app provides a visualization that you can use in your own apps and dashboards.
  • To use it in your dashboards, simply install the app, and create a search that provides the following fields: _time, name, value, status

Usecases for the Performance Analysis Visualization:

  1. Displaying both infrastructure and application health over time
  2. Showing both performance and availability of transactions from a selenium script (Application Performance Monitoring)
  3. Monitoring Application health and exceptions over the past day or week
  4. Tracking the number of code commits vs build status over time

The following fields can be used in the search:

  • _time (required): the time field for the events.
  • name (required): The label for each row of the table. This usually represents the server name.
  • value (required): The numeric value of the primary metric - e.g. CPU %. This will determine the colour of the cells.
  • status (required): This represents the secondary metric - e.g. Application health. Status is used to create the icon or numeric value. Can be textual: GREEN / AMBER / RED, or numeric: 12.22. If you don't want to show a status, you can set this to "" (...| eval staus="" |...)
  • warning_threshold (optional): This value determines when the cell background color changes from GREEN to AMBER. You can set a different warning_threshold for each name, or use the default settings.
  • critical_threshold (optional): This value determines when the cell background color changes from AMBER to RED. You can set a different critical_threshold for each name, or use the default settings.

Example Search

index=_internal earliest = -24h@h group=*| rename group as name, date_second as value, date_minute as status | table _time, name, value, status

A sample data set is included with the app:

| inputlookup sample-data.csv

Version Support

8.0, 7.3, 7.2, 7.1, 7.0, 6.6

Release Notes

v 1.0.0

  • Initial version
  • Works with dark mode in Splunk 7.2
  • Tested in IE, Firefox, Chrome, and Edge

Possible Issues

  • No issues have been raised. If you have a bug report, please contact daniel@spavin.net

Privacy and Legal

  • No personally identifiable information is logged or obtained in any way through this visualizaton.

For support

  • Send email to daniel@spavin.net
  • Support is not guaranteed and will be provided on a best effort basis.

Release Notes

Version 1.4.0
Feb. 5, 2022

V 1.4.0
* Minor updates to work with Splunk Cloud

Version 1.3.0
Sept. 24, 2019

V 1.3.0
- Fixed issue with Splunk 7.3.x showing 'undefined' on the options menu
- Fixed bug where null values were converted to zero. Now you can display 'No Data' when all values for a time slice are null.
- Down-time is now turned off by default. It can still be enabled via the Options window.

Version 1.2.0
Aug. 3, 2019

v 1.2.0
Events previously had to be in time order, causing some searches to show incorrect results. That requirement has now been removed.
Even when sorted in a random order the viz will display the start and end times correctly.
You can now have Critical values lower than OK values - e.g. number of purchases per hour is critical at 0, but OK at 50. See Options - Default Thresholds
Names can now be sorted by order found in search results (default), alphabetical, or reverse alphabetical.
* The maximum size of the visualization has been increased from 1,000px to 10,000px so you can view more KPIs without seeing a scroll bar.

Version 1.1.0
Oct. 31, 2018
  • Updated drill down support to filter by name as well as date
  • Added token support to allow interactive dashboards
  • Created new dashboard to feature the drill down and token features

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.