<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Timechart, timewrap by day in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Timechart-timewrap-by-day/m-p/434730#M40824</link>
    <description>&lt;P&gt;I have few question the dashboard, any help is appreciated &lt;BR /&gt;
1. can we do any optimizations on the search querie ?&lt;BR /&gt;
2. It is displaying the same date, when we movie mouse over the graph need help in fixing it?&lt;BR /&gt;
3. I would also like to display date rather than 1day ag0, 2days ago and so on ?&lt;BR /&gt;
4. On the last bar chart I would like to display, bar graph for each day separately ? &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;Real  (Test)&amp;lt;/label&amp;gt;
  &amp;lt;fieldset autoRun="true" submitButton="false"&amp;gt;
    &amp;lt;input type="dropdown" token="level" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Pick the TimeRange:&amp;lt;/label&amp;gt;
      &amp;lt;choice value="-6d@d"&amp;gt;Last 7 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-5d@d"&amp;gt;Last 6 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-4d@d"&amp;gt;Last 5 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-3d@d"&amp;gt;Last 4 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-2d@d"&amp;gt;Last 3 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-1d@d"&amp;gt;Last 2 days&amp;lt;/choice&amp;gt;
      &amp;lt;default&amp;gt;Last 2 days&amp;lt;/default&amp;gt;
      &amp;lt;change&amp;gt;
        &amp;lt;condition value="-6d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-6d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-5d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-5d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-4d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-4d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-3d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-3d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-2d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-2d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-1d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-1d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
      &amp;lt;/change&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Total transactions&amp;lt;/title&amp;gt;
      &amp;lt;chart&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;sourcetype=aa OR sourcetype=bb TransactionId=TID* AND TransactionId!=TID
| timechart count span=1h | timewrap 1day&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;$s_end$&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="charting.chart"&amp;gt;area&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/chart&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Total Successful transactions&amp;lt;/title&amp;gt;
      &amp;lt;chart&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;sourcetype="aa" TransactionId=TID*
| search eventName="POSTING:SUCCEEDED"
| timechart dc(TransactionId) as Successful_transactions span=1h | timewrap 1day&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;$s_end$&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="charting.chart"&amp;gt;area&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/chart&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Total Rejected transactions&amp;lt;/title&amp;gt;
      &amp;lt;chart&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;sourcetype="aa" TransactionId=TID*
| search "processingStatusCode":"REJECTED"
| timechart dc(TransactionId) as Successful_transactions span=1h | timewrap 1day&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;$s_end$&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="charting.chart"&amp;gt;area&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/chart&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Received Real Time payments status&amp;lt;/title&amp;gt;
      &amp;lt;chart&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;sourcetype="aa" OR sourcetype="bb" TransactionId=TID* AND TransactionId!=TID
| eval Status=if(like(_raw, "%POSTING:SUCCEEDED%"), "2.Successful transactions" , "1.Rejected Transactions") 
| timechart count by Status&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;$s_end$&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="charting.axisTitleY.text"&amp;gt;Number of transactions&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisY.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisY2.enabled"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.chart.showDataLabels"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.chart.stackMode"&amp;gt;stacked&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.layout.splitSeries"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.seriesColors"&amp;gt;["0xFF3333","0x65a637"]&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;set token="click_earliest"&amp;gt;$earliest$&amp;lt;/set&amp;gt;
          &amp;lt;set token="click_latest"&amp;gt;$latest$&amp;lt;/set&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/chart&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Mon, 15 Oct 2018 20:31:02 GMT</pubDate>
    <dc:creator>sandeepmakkena</dc:creator>
    <dc:date>2018-10-15T20:31:02Z</dc:date>
    <item>
      <title>Timechart, timewrap by day</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Timechart-timewrap-by-day/m-p/434730#M40824</link>
      <description>&lt;P&gt;I have few question the dashboard, any help is appreciated &lt;BR /&gt;
1. can we do any optimizations on the search querie ?&lt;BR /&gt;
2. It is displaying the same date, when we movie mouse over the graph need help in fixing it?&lt;BR /&gt;
3. I would also like to display date rather than 1day ag0, 2days ago and so on ?&lt;BR /&gt;
4. On the last bar chart I would like to display, bar graph for each day separately ? &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;Real  (Test)&amp;lt;/label&amp;gt;
  &amp;lt;fieldset autoRun="true" submitButton="false"&amp;gt;
    &amp;lt;input type="dropdown" token="level" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Pick the TimeRange:&amp;lt;/label&amp;gt;
      &amp;lt;choice value="-6d@d"&amp;gt;Last 7 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-5d@d"&amp;gt;Last 6 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-4d@d"&amp;gt;Last 5 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-3d@d"&amp;gt;Last 4 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-2d@d"&amp;gt;Last 3 days&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="-1d@d"&amp;gt;Last 2 days&amp;lt;/choice&amp;gt;
      &amp;lt;default&amp;gt;Last 2 days&amp;lt;/default&amp;gt;
      &amp;lt;change&amp;gt;
        &amp;lt;condition value="-6d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-6d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-5d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-5d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-4d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-4d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-3d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-3d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-2d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-2d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition value="-1d@d"&amp;gt;
          &amp;lt;set token="s_level"&amp;gt;1day&amp;lt;/set&amp;gt;
          &amp;lt;set token="s_end"&amp;gt;-1d@d&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
      &amp;lt;/change&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Total transactions&amp;lt;/title&amp;gt;
      &amp;lt;chart&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;sourcetype=aa OR sourcetype=bb TransactionId=TID* AND TransactionId!=TID
| timechart count span=1h | timewrap 1day&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;$s_end$&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="charting.chart"&amp;gt;area&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/chart&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Total Successful transactions&amp;lt;/title&amp;gt;
      &amp;lt;chart&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;sourcetype="aa" TransactionId=TID*
| search eventName="POSTING:SUCCEEDED"
| timechart dc(TransactionId) as Successful_transactions span=1h | timewrap 1day&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;$s_end$&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="charting.chart"&amp;gt;area&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/chart&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Total Rejected transactions&amp;lt;/title&amp;gt;
      &amp;lt;chart&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;sourcetype="aa" TransactionId=TID*
| search "processingStatusCode":"REJECTED"
| timechart dc(TransactionId) as Successful_transactions span=1h | timewrap 1day&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;$s_end$&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="charting.chart"&amp;gt;area&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/chart&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Received Real Time payments status&amp;lt;/title&amp;gt;
      &amp;lt;chart&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;sourcetype="aa" OR sourcetype="bb" TransactionId=TID* AND TransactionId!=TID
| eval Status=if(like(_raw, "%POSTING:SUCCEEDED%"), "2.Successful transactions" , "1.Rejected Transactions") 
| timechart count by Status&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;$s_end$&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="charting.axisTitleY.text"&amp;gt;Number of transactions&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisY.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisY2.enabled"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.chart.showDataLabels"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.chart.stackMode"&amp;gt;stacked&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.layout.splitSeries"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.seriesColors"&amp;gt;["0xFF3333","0x65a637"]&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;set token="click_earliest"&amp;gt;$earliest$&amp;lt;/set&amp;gt;
          &amp;lt;set token="click_latest"&amp;gt;$latest$&amp;lt;/set&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/chart&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 15 Oct 2018 20:31:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Timechart-timewrap-by-day/m-p/434730#M40824</guid>
      <dc:creator>sandeepmakkena</dc:creator>
      <dc:date>2018-10-15T20:31:02Z</dc:date>
    </item>
  </channel>
</rss>

