https://community.splunk.com/t5/All-Apps-and-Add-ons/weird-timeline-application-work/m-p/497155#M61157 <P>HI all.</P> <P>I am trying to set up a timeline application in splunk, but I get strange results.</P> <P>My query looks like this:</P> <PRE><CODE>| eval dayofweekfull = strftime (Start, "% A") | eval duration = round (End-Start) * 1000 | rename Start AS _time | stats count by _time, duration, dayofweekfull | table _time dayofweekfull duration </CODE></PRE> <P>As a result, the timeline is not entirely true. I need to get a table by day of the week, but they are not displayed correctly.</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7785i10E837F48C1BB377/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>My data is:</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7786i7A832BBA05AF0090/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Wed, 02 Oct 2019 18:30:14 GMT GenRockeR 2019-10-02T18:30:14Z https://community.splunk.com/t5/All-Apps-and-Add-ons/weird-timeline-application-work/m-p/497155#M61157 <P>HI all.</P> <P>I am trying to set up a timeline application in splunk, but I get strange results.</P> <P>My query looks like this:</P> <PRE><CODE>| eval dayofweekfull = strftime (Start, "% A") | eval duration = round (End-Start) * 1000 | rename Start AS _time | stats count by _time, duration, dayofweekfull | table _time dayofweekfull duration </CODE></PRE> <P>As a result, the timeline is not entirely true. I need to get a table by day of the week, but they are not displayed correctly.</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7785i10E837F48C1BB377/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>My data is:</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7786i7A832BBA05AF0090/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Wed, 02 Oct 2019 18:30:14 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/weird-timeline-application-work/m-p/497155#M61157 GenRockeR 2019-10-02T18:30:14Z