topic x-axis marks in Dashboards & Visualizations

x-axis marks

0range — Wed, 04 Dec 2013 05:55:37 GMT

Hi everyone.
I have a 24-hours chart on a dashboard with marks on X axis every 6 hours.
How to make marks more frequent?

Re: x-axis marks

bfernandez — Tue, 06 May 2014 08:56:17 GMT

If you are using timechart you can use span option to do it.

http://docs.splunk.com/Documentation/Splunk/6.0.3/SearchReference/Timechart

span
Syntax: span= | span=
Description: Sets the size of each bucket, using a span length based on time or log-based span.

Re: x-axis marks

0range — Tue, 06 May 2014 10:11:05 GMT

But that's about chart point frequency, not axis marks frequency. If it's clear what I'm trying to say..

Re: x-axis marks

0range — Tue, 06 May 2014 10:14:17 GMT

Here's what I'm trying to explain:
there are martks 1:55, 2:00, 2:05....
And if I want them to be each 2 minutes, or each minute - what can I do?

Re: x-axis marks

bfernandez — Mon, 28 Sep 2020 16:32:39 GMT

Alright, I don’t know if there are any xml option (simple or advance) to do it but you can bucket your data in the time interval that you want and use it in the xseries of your chart in spite of using the default timechart capabilities.

I mean, | bucket span=6m _time | eval mytime = strftime(_time, "%H:%M:%S") | stats xxx by mytime

This should force the chart to mark your frequency.