It is time to build the second row of your real-time dashboard. Once again, we will use the cloning panel function:
- Enter edit mode with the Edit button
- Click on Add Panel
- Clone the panel from the dynamic form-based dashboard Hits vs Response Time:
- Click on Add to Dashboard
Do not be surprised if the graph is not generated. Remember we are cloning from a form-based dashboard with input tokens.
- Rename the panel to Traffic and Performance
- Change the search string to remove input token references:
SPL> index=main | timechart count, avg(http_response_time) as response_time
- Change the Time Range Scope to Used time picker
- Change the Time Range to Real-time and set its value as 24 Hours Ago
- Click on Apply twice to save changes to the search and return to editing the dashboard
- The chart will now populate the data
- Click on Save
We will create another panel similar to the one we made previously. But this time, we will clone from the previous one to make our task easier:
- Reload the browser. This is needed to load the newly-created panels in the clone selections.
- Enter edit mode via the Edit button.
- Clone the Hits vs Response Time panel by selecting it and adding it to the dashboard:
- Rename the new panel to Booking Conversion.
- Change the Search String:
SPL> index=main http_uri=/booking/reservation OR http_uri=/booking/confirmation | timechart count by http_uri | rename /booking/confirmation AS Confirmation, /booking/reservation AS Reservation | eval Conversion=Reservation/Confirmation | fields _time, Reservation, Confirmation, Conversion
- Ensure the Time Range of Real-time | 24 Hours Ago is still enabled from the clone process.
- Click on Apply.
- Click on the Format Visualization icon.
- Select the second option in Stack Mode as stacked.
- Click Chart Overlay.
- Delete the response_time overlay.
- Add the Conversion overlay.
- Turn on View as Axis.
- Click on the X to close the Format Visualization window.
- Drag this panel to the right of the second row.
You have completed the real-time version of the combo charts. It should look similar to the following screenshot:
Real-time combo charts with line overlays