Distribution Graph: How to change the interval span for numeric values on the x-axis without the timechart command?

soniquella — Thu, 10 Dec 2015 09:51:15 GMT

Hi there. I hope someone can help.

I am trying to create a distribution graph based on frequency of the number of times a file of a specific size is used over our AHFT service.
I have the quantities, but need to set a custom internal of around 20-30 on the x-axis. I have successfully resolved this on another graph, but this was time based so was able to use the timechart option.

How do you change the interval span for numeric values on the x-axis?

Please see below:

index=mail MAILHOST.co.uk NOT To="support@splunk.com, HOST.co.uk"    | rex field=_raw "(?m)_____\s+A\s+file\s+has\s+been\s+sent\s+to\s+you\s+by\s* (?<AHFT_From>.*\))"    | rex field=_raw "(?m)its\s+size\s+is\s*(?<FileSize>.*)\s+bytes"     | search FileSize="*" AHFT_From="*" linecount=39 | eval FileSize = round(FileSize/1024/1024) | stats count by FileSize | sort by FileSize stats count by FileSize | sort by FileSize

Any help would be greatly appreciated.

Kind regards,

Rob.

Re: Distribution Graph: How to change the interval span for numeric values on the x-axis without the timechart command?

sundareshr — Thu, 10 Dec 2015 20:45:22 GMT

See if this resolves your issue

http://docs.splunk.com/Documentation/Splunk/6.3.1511/SearchReference/Bin

topic Re: Distribution Graph: How to change the interval span for numeric values on the x-axis without the timechart command? in Dashboards & Visualizations

Distribution Graph: How to change the interval span for numeric values on the x-axis without the timechart command?

Re: Distribution Graph: How to change the interval span for numeric values on the x-axis without the timechart command?