topic How can I change the legend values for timechart to a different format? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-legend-values-for-timechart-to-a-different/m-p/432323#M123528 <P>How can I change the values in the legend for a timechart? I use:<BR /> index=indexone sourcetype=sourceone | timechart count by X usenull=0 span=1h |timewrap 1day</P> <P>Some of the results look like: X_22days_before. I want to have just the X. </P> Tue, 29 Sep 2020 21:04:18 GMT desi_stoitsova 2020-09-29T21:04:18Z How can I change the legend values for timechart to a different format? https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-legend-values-for-timechart-to-a-different/m-p/432323#M123528 <P>How can I change the values in the legend for a timechart? I use:<BR /> index=indexone sourcetype=sourceone | timechart count by X usenull=0 span=1h |timewrap 1day</P> <P>Some of the results look like: X_22days_before. I want to have just the X. </P> Tue, 29 Sep 2020 21:04:18 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-legend-values-for-timechart-to-a-different/m-p/432323#M123528 desi_stoitsova 2020-09-29T21:04:18Z