topic Re: Weekdays on Timechart in Splunk Search

Weekdays on Timechart

paulf — Wed, 29 Aug 2012 09:48:32 GMT

Hi,

Is it possible for Splunk to show ALL days on the x-axis for a timechart? I have a search which returns data for every single day for the last month, but the x-axis is only filled with labels for the start of each week.

Ideally i would like it to show me, Mon, Tue, Wed etc...

Also, i am using | timechart count
Thanks
Paul

Re: Weekdays on Timechart

jonuwz — Wed, 29 Aug 2012 10:21:38 GMT

If its on a dashboard you could edit the xml to add some options :

<option name="charting.chart">line</option>
<option name="charting.axisLabelsX.majorLabelVisibility">hide</option>
<option name="charting.axisLabelsX.minorLabelVisibility">show</option>

This'll hide the start of week labels on the X axis, and enable the daily (minorLabels)

Its a bit cramped though.

All the axis/chart options are documented here

Re: Weekdays on Timechart

paulf — Wed, 29 Aug 2012 10:39:42 GMT

Hi, I am doing this as a search, without a dashboard view.

Can these options be used in the search somehow?, if not, is it possible to do what i need from the search?

Re: Weekdays on Timechart

jonuwz — Wed, 29 Aug 2012 16:09:16 GMT

I've not seen an option that allows you to do that from the search bar