topic Re: How to suppress extra _time line on timechart in dashboard in Splunk Search

How to suppress extra _time line on timechart in dashboard

joegrossman — Thu, 10 May 2012 20:38:01 GMT

I have a search that creates a timechart. I do not specify a time range. When I run the search I get the results I expect.
But when I add the search to a dashboard I get a line below the time legend on the x axis that says _time. I would like to eliminate this--both the _time and the line it occupies. (That is, I don't just want to replace _time with spaces). When I go to edit visualizaton in the dashboard the x axis is blank.

Can someone help with this?

Re: How to suppress extra _time line on timechart in dashboard

sideview — Thu, 10 May 2012 21:11:24 GMT

You need to set the charting.axisTitleX.visibility key to collapsed.

Using HiddenChartFormatter, it would look like this:

<module name="HiddenChartFormatter">
  <param name="charting.axisTitleX.visibility">collapsed</param>

That will not only remove the _time label, but will also collapse the vertical space it takes up.

Re: How to suppress extra _time line on timechart in dashboard

yoho — Wed, 08 Jan 2014 10:43:17 GMT

Unfortunately, only works with "FlashChart" and not "JSchart" module.

Re: How to suppress extra _time line on timechart in dashboard

sansay — Wed, 26 Mar 2014 21:38:39 GMT

For JSChart add an empty title, like this:

For example:

    <param name="charting.chart">area</param>
    <param name="charting.axisTitleX.text"></param>
    <module name="JSChart">

Re: How to suppress extra _time line on timechart in dashboard

sansay — Tue, 25 Nov 2014 23:55:33 GMT

I just found out that, strangely enough, this solution will only remove _time. If you rename _time in your query it will not remove it.