topic Turn the date on a graph in Splunk Search

Turn the date on a graph

hartfoml — Fri, 07 Sep 2012 18:12:59 GMT

I have a graph that is showing data by date over the last 30 days. I have converted timeformat down to "%m/%d. Even with this small date format it is hard to read the date when I squash 30 days on the chart. I would also like to show the "%a" short day format so people can see the weekend days.

My question is how to I turn the date on the x axis so it is printed vertically rather that horizontally so it is more readable?

Re: Turn the date on a graph

imrago — Fri, 07 Sep 2012 19:10:08 GMT

To rotate the labels, in the advanced xml you could add the following parameter to HiddenChartFormatter module

This might not be supported in JSChart.

Re: Turn the date on a graph

hartfoml — Fri, 07 Sep 2012 19:30:37 GMT

Thanks for the help

Here is what I have that is not working

Splunk Licence Use Over 30 Days
Splunk Licence Use Over 30 Days
line
90

Re: Turn the date on a graph

imrago — Fri, 07 Sep 2012 19:53:18 GMT

in case that you are using simplified xml that line would be

so try this:

Splunk Licence Use Over 30 Days
Splunk Licence Use Over 30 Days
line
90

Re: Turn the date on a graph

hartfoml — Fri, 07 Sep 2012 21:13:44 GMT

Thanks so much for the help. this code looks like it should work but it doesn't. if you can think of anything else let me know.

Hope to see you at the Users .conf next week. Thanks again

Re: Turn the date on a graph

imrago — Fri, 07 Sep 2012 21:45:43 GMT

My previous suggestion did not work, because JSChart was used by simplified xml.

Please try the following where you will get flash based chart :

Splunk Licence Use Over 30 Days
Splunk Licence Use Over 30 Days
line
1
90