topic How to change timechart data points to reflect full timestamp instead of date_hours in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-change-timechart-data-points-to-reflect-full-timestamp/m-p/393172#M114392 <P>Disclaimer - very green to Splunk </P> <P>My timechart is built with the following</P> <PRE><CODE>$search | timechart avg(date_hour) by date_mday </CODE></PRE> <P>And the chart itself looks fine but because im only asking for date_hour each point only reflects the hour portion of each log's time stamp. Can I change my query so the alt text for each data point on the chart reflect the full time stamp? </P> <P>Also, my x axis properly sorts point by day but my y axis bounds are off - can I set the max and min myself? </P> <P>THANK YOU</P> Fri, 19 Jul 2019 13:47:03 GMT jonleach 2019-07-19T13:47:03Z How to change timechart data points to reflect full timestamp instead of date_hours https://community.splunk.com/t5/Splunk-Search/How-to-change-timechart-data-points-to-reflect-full-timestamp/m-p/393172#M114392 <P>Disclaimer - very green to Splunk </P> <P>My timechart is built with the following</P> <PRE><CODE>$search | timechart avg(date_hour) by date_mday </CODE></PRE> <P>And the chart itself looks fine but because im only asking for date_hour each point only reflects the hour portion of each log's time stamp. Can I change my query so the alt text for each data point on the chart reflect the full time stamp? </P> <P>Also, my x axis properly sorts point by day but my y axis bounds are off - can I set the max and min myself? </P> <P>THANK YOU</P> Fri, 19 Jul 2019 13:47:03 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-timechart-data-points-to-reflect-full-timestamp/m-p/393172#M114392 jonleach 2019-07-19T13:47:03Z Re: How to change timechart data points to reflect full timestamp instead of date_hours https://community.splunk.com/t5/Splunk-Search/How-to-change-timechart-data-points-to-reflect-full-timestamp/m-p/393173#M114393 <P>Try 'span' keyword in 'timechart' command</P> <PRE><CODE>&lt;base_search&gt; | timechart span=1h avg(field_name) </CODE></PRE> Mon, 22 Jul 2019 06:07:11 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-timechart-data-points-to-reflect-full-timestamp/m-p/393173#M114393 jawaharas 2019-07-22T06:07:11Z Re: How to change timechart data points to reflect full timestamp instead of date_hours https://community.splunk.com/t5/Splunk-Search/How-to-change-timechart-data-points-to-reflect-full-timestamp/m-p/393174#M114394 <P>Adding span gets me exactly what I needed, thanks!</P> Mon, 22 Jul 2019 13:41:14 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-timechart-data-points-to-reflect-full-timestamp/m-p/393174#M114394 jonleach 2019-07-22T13:41:14Z