topic Re: how can i dynamicly change span parametr in timechart in Splunk Search

how can i dynamicly change span parametr in timechart

mishaaaaaaaaaa — Mon, 04 Feb 2019 14:28:06 GMT

i need to change span parameter depending on the time range
how can i set dynamycly changing of span in my search query?
or if it's impossible how can i set my span parameter like this:
.....
| eval spanValue=floor(0.0541/15*900)
| eval unit="m@m"
| eval spanConcatinated=spanValue."".unit
| timechart span=spanConcatinated
.....

Re: how can i dynamicly change span parametr in timechart

vnravikumar — Mon, 04 Feb 2019 14:46:41 GMT

Hi @mishaaaaaaaaaa

check this

https://answers.splunk.com/answers/443382/set-span-in-timechart-based-on-value-from-time-pic.html

Re: how can i dynamicly change span parametr in timechart

woodcock — Mon, 04 Feb 2019 14:52:11 GMT

Check out the answer here:

https://answers.splunk.com/answers/318526/how-do-i-get-the-time-span-spanx-in-a-search-to-au.html?childToView=318622#answer-318622

Don't forget to UpVote!

Re: how can i dynamicly change span parametr in timechart

woodcock — Mon, 04 Feb 2019 14:52:22 GMT

Don't forget to UpVote!

Re: how can i dynamicly change span parametr in timechart

mishaaaaaaaaaa — Tue, 05 Feb 2019 06:26:37 GMT

Thanks a lot! that's what i was looking for!

Re: how can i dynamicly change span parametr in timechart

mishaaaaaaaaaa — Tue, 05 Feb 2019 06:27:02 GMT

thanks a lot!

Re: how can i dynamicly change span parametr in timechart

woodcock — Tue, 05 Feb 2019 15:56:35 GMT

While we certainly appreciate your UpVotes here, @mishaaaaaaaaaa, I was talking about the other Answers inside the links that we referenced. The reason that this is important, is so that others will be more easily able to find the answers straight away and not have to post duplicate questions like you did (having not been able to find the other Q&As when searching).