https://community.splunk.com/t5/Splunk-Search/Overlaping-Days-with-Timecharts/m-p/76471#M19348 <P>Instead of <CODE>timechart</CODE> you can use <CODE>chart</CODE> and have it chart over <CODE>date_hour</CODE> to get per-hour stats for each of your weekdays.</P> <PRE><CODE>index="prd_common_events" EventName="ExceptionEventETL" | chart count over date_hour by date_wday </CODE></PRE> Thu, 15 Sep 2011 18:12:56 GMT Ayn 2011-09-15T18:12:56Z https://community.splunk.com/t5/Splunk-Search/Overlaping-Days-with-Timecharts/m-p/76470#M19347 <P>I'm looking to make a line chart that has several days over data superimposed over each other so that I can see the trend of an event over the course of a day.</P> <P>Currently my Search term is:</P> <P>index="prd_common_events" EventName="ExceptionEventETL" | timechart span=1h count by date_mday</P> <P>When I set it to 7 days, it gives me each of the days in a different color. Is there a way I can offset them so they are all rendered on the same graph of 24 hours?</P> Mon, 28 Sep 2020 09:53:12 GMT https://community.splunk.com/t5/Splunk-Search/Overlaping-Days-with-Timecharts/m-p/76470#M19347 achudnoff 2020-09-28T09:53:12Z https://community.splunk.com/t5/Splunk-Search/Overlaping-Days-with-Timecharts/m-p/76471#M19348 <P>Instead of <CODE>timechart</CODE> you can use <CODE>chart</CODE> and have it chart over <CODE>date_hour</CODE> to get per-hour stats for each of your weekdays.</P> <PRE><CODE>index="prd_common_events" EventName="ExceptionEventETL" | chart count over date_hour by date_wday </CODE></PRE> Thu, 15 Sep 2011 18:12:56 GMT https://community.splunk.com/t5/Splunk-Search/Overlaping-Days-with-Timecharts/m-p/76471#M19348 Ayn 2011-09-15T18:12:56Z