The single value visualization is also able to display trends and sparklines. However, for this to happen the search must be based on the timechart command. We can modify the search from the recipe to illustrate this functionality as follows:
index=main sourcetype=access_combined | timechart span=1h dc(JSESSIONID)
Run this modified search and when the search completes, click on the Visualization tab and choose the Single Value visualization type. Next, click on the Format button. On the General tab, you will now notice that there are many more options available to select from, specifically around trending. Leave the default options selected, but select to Show trend in Percent. Now, select the ...
