<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Timechart - x-axis to show label/ticks as Sunday instead of Monday in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Timechart-x-axis-to-show-label-ticks-as-Sunday-instead-of-Monday/m-p/474901#M133516</link>
    <description>&lt;P&gt;Hey there folks!&lt;/P&gt;

&lt;P&gt;Can't believe I'm stuck on something which could be pretty simple.&lt;BR /&gt;
I have a timechart with span=1d working well.&lt;BR /&gt;
However, I can't seem to get the x-axis label (tick marks) to show Sundays instead of Mondays.&lt;BR /&gt;
The weekly interval tick marks is ideal, but I just need it to be Sundays instead.&lt;/P&gt;

&lt;P&gt;Is there a way?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;|inputlookup test.csv
        | replace N/A WITH N IN 2B_FLAG
        | replace N WITH 2C, Y WITH 2B IN 2B_FLAG
        | eval NewTime=strptime(SHP_CREATED_DTM,"%d-%b-%y")
        | where NewTime&amp;gt;=1577836800
        | eval _time=NewTime
          | timechart span=1d sum(SHP_VOL) by 2B_FLAG
          | sort _time
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/8685iDD96A45DCA249D4A/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
    <pubDate>Fri, 10 Apr 2020 14:23:00 GMT</pubDate>
    <dc:creator>andrewwjc</dc:creator>
    <dc:date>2020-04-10T14:23:00Z</dc:date>
    <item>
      <title>Timechart - x-axis to show label/ticks as Sunday instead of Monday</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Timechart-x-axis-to-show-label-ticks-as-Sunday-instead-of-Monday/m-p/474901#M133516</link>
      <description>&lt;P&gt;Hey there folks!&lt;/P&gt;

&lt;P&gt;Can't believe I'm stuck on something which could be pretty simple.&lt;BR /&gt;
I have a timechart with span=1d working well.&lt;BR /&gt;
However, I can't seem to get the x-axis label (tick marks) to show Sundays instead of Mondays.&lt;BR /&gt;
The weekly interval tick marks is ideal, but I just need it to be Sundays instead.&lt;/P&gt;

&lt;P&gt;Is there a way?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;|inputlookup test.csv
        | replace N/A WITH N IN 2B_FLAG
        | replace N WITH 2C, Y WITH 2B IN 2B_FLAG
        | eval NewTime=strptime(SHP_CREATED_DTM,"%d-%b-%y")
        | where NewTime&amp;gt;=1577836800
        | eval _time=NewTime
          | timechart span=1d sum(SHP_VOL) by 2B_FLAG
          | sort _time
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/8685iDD96A45DCA249D4A/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 10 Apr 2020 14:23:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Timechart-x-axis-to-show-label-ticks-as-Sunday-instead-of-Monday/m-p/474901#M133516</guid>
      <dc:creator>andrewwjc</dc:creator>
      <dc:date>2020-04-10T14:23:00Z</dc:date>
    </item>
  </channel>
</rss>

