https://community.splunk.com/t5/Dashboards-Visualizations/using-field-in-timechart-queries/m-p/129914#M7661 <P>I believe that the <CODE>timechart</CODE> command will remove all unnecessary information. </P> <P>What you could do is to ensure that your question before the <CODE>timechart</CODE> runs as efficiently as possible, e.g. specifying the correct index and sourcetype, search only for the time range you're interested in. You could even instruct Splunk to not extract any fields at all (<CODE>KV_MODE = none</CODE> in props.conf), and only extract what you need with (an efficient) <CODE>rex</CODE>.</P> <P>/K</P> Sun, 13 Apr 2014 19:35:43 GMT kristian_kolb 2014-04-13T19:35:43Z https://community.splunk.com/t5/Dashboards-Visualizations/using-field-in-timechart-queries/m-p/129913#M7660 <P>I have a dashboard with many panels. If i used the 'field' command for for the underlying queries, would that help save Splunk resources? </P> <P>Or does Splunk already know what field to use when it see's 'timechart count by <FIELD>' and then ignores the rest of the fields???</FIELD></P> Sun, 13 Apr 2014 17:35:50 GMT https://community.splunk.com/t5/Dashboards-Visualizations/using-field-in-timechart-queries/m-p/129913#M7660 subtrakt 2014-04-13T17:35:50Z https://community.splunk.com/t5/Dashboards-Visualizations/using-field-in-timechart-queries/m-p/129914#M7661 <P>I believe that the <CODE>timechart</CODE> command will remove all unnecessary information. </P> <P>What you could do is to ensure that your question before the <CODE>timechart</CODE> runs as efficiently as possible, e.g. specifying the correct index and sourcetype, search only for the time range you're interested in. You could even instruct Splunk to not extract any fields at all (<CODE>KV_MODE = none</CODE> in props.conf), and only extract what you need with (an efficient) <CODE>rex</CODE>.</P> <P>/K</P> Sun, 13 Apr 2014 19:35:43 GMT https://community.splunk.com/t5/Dashboards-Visualizations/using-field-in-timechart-queries/m-p/129914#M7661 kristian_kolb 2014-04-13T19:35:43Z