https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569171#M198379 <P>Maybe it's what you tried to do, but they're definitely not sharing either the range nor the span.</P><P>1 day span produces a single value per day and your upper linechart has resolution of - i don't know - 1 hour?</P><P>So no, there's something wrong.&nbsp; We don't know what because we don't see the definitions.</P> Thu, 30 Sep 2021 15:11:18 GMT PickleRick 2021-09-30T15:11:18Z https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569159#M198371 <P>Hello,<BR /><BR />i've put two timecharts on top of each other to compare their events by time. Both timecharts are using the same time range and span.</P><P>The top timechart has many data points&nbsp; whereas the bottom has just a few.</P><P>How can I show the same time range on the x-axis in both timecharts?</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="timecharts.png" style="width: 817px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/16227i4C3A293D8D935ADA/image-size/large?v=v2&amp;px=999" role="button" title="timecharts.png" alt="timecharts.png" /></span></P> Thu, 30 Sep 2021 14:35:09 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569159#M198371 n0cturne 2021-09-30T14:35:09Z https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569161#M198373 <P>What do you mean by "Both timecharts are using the same time range and span"?</P><P>The upper chart is definitely over a longer range (whole week, I think) than the lower one (this one covers less than a day).</P> Thu, 30 Sep 2021 14:41:41 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569161#M198373 PickleRick 2021-09-30T14:41:41Z https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569170#M198378 <P>Both timecharts are using a global time token (7d in this case) and span=1d.<BR />I've expected, that both x-axis were matching.</P> Thu, 30 Sep 2021 15:08:39 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569170#M198378 n0cturne 2021-09-30T15:08:39Z https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569171#M198379 <P>Maybe it's what you tried to do, but they're definitely not sharing either the range nor the span.</P><P>1 day span produces a single value per day and your upper linechart has resolution of - i don't know - 1 hour?</P><P>So no, there's something wrong.&nbsp; We don't know what because we don't see the definitions.</P> Thu, 30 Sep 2021 15:11:18 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569171#M198379 PickleRick 2021-09-30T15:11:18Z https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569204#M198394 <P>Here are my panels and settings.</P><P><BR /><BR />inputs:</P><P>&nbsp;</P><LI-CODE lang="markup"> &lt;input type="time" token="time_infra"&gt; &lt;label&gt;Time Range&lt;/label&gt; &lt;default&gt; &lt;earliest&gt;-48h&lt;/earliest&gt; &lt;latest&gt;&lt;/latest&gt; &lt;/default&gt; &lt;/input&gt; &lt;input type="dropdown" token="span" searchWhenChanged="false"&gt; &lt;label&gt;Span&lt;/label&gt; &lt;choice value="1m"&gt;1 min&lt;/choice&gt; &lt;choice value="5m"&gt;5 min&lt;/choice&gt; &lt;choice value="15m"&gt;15 min&lt;/choice&gt; &lt;choice value="30m"&gt;30 min&lt;/choice&gt; &lt;choice value="1h"&gt;1 hour&lt;/choice&gt; &lt;choice value="2h"&gt;2 hours&lt;/choice&gt; &lt;choice value="4h"&gt;4 hours&lt;/choice&gt; &lt;choice value="8h"&gt;8 hours&lt;/choice&gt; &lt;choice value="12h"&gt;12 hours&lt;/choice&gt; &lt;choice value="1d"&gt;1 day&lt;/choice&gt; &lt;choice value="1w"&gt;1 week&lt;/choice&gt; &lt;default&gt;5m&lt;/default&gt; &lt;initialValue&gt;5m&lt;/initialValue&gt; &lt;/input&gt; &lt;input type="dropdown" token="refresh_rate"&gt; &lt;label&gt;Refresh rate&lt;/label&gt; &lt;choice value="1m"&gt;1 min&lt;/choice&gt; &lt;choice value="3m"&gt;3 min&lt;/choice&gt; &lt;choice value="5m"&gt;5 min&lt;/choice&gt; &lt;choice value="10m"&gt;10 min&lt;/choice&gt; &lt;choice value="15m"&gt;15 min&lt;/choice&gt; &lt;choice value="30m"&gt;30 min&lt;/choice&gt; &lt;choice value="1h"&gt;1 h&lt;/choice&gt; &lt;default&gt;10m&lt;/default&gt; &lt;initialValue&gt;10m&lt;/initialValue&gt; &lt;/input&gt;</LI-CODE><P>&nbsp;</P><P><BR />top chart:</P><P>&nbsp;</P><LI-CODE lang="markup"> &lt;panel id="heap_back"&gt; &lt;html&gt; &lt;style&gt; #heap_back{ width:30% !important; } &lt;/style&gt; &lt;/html&gt; &lt;chart&gt; &lt;title&gt;....Backend&lt;/title&gt; &lt;search&gt; &lt;query&gt;index=ascrm sourcetype=jmx heap_used=* heap_max=* crm_tier=backend | fields host,heap_used,heap_max | eval hu=100/heap_max*heap_used | rex field=host "(?&amp;lt;hostname&amp;gt;[^.]+)\." | timechart span=$span$ eval(round(p99(hu),0)) by hostname&lt;/query&gt; &lt;earliest&gt;$time_infra.earliest$&lt;/earliest&gt; &lt;latest&gt;$time_infra.latest$&lt;/latest&gt; &lt;sampleRatio&gt;1&lt;/sampleRatio&gt; &lt;refresh&gt;$refresh_rate$&lt;/refresh&gt; &lt;refreshType&gt;delay&lt;/refreshType&gt; &lt;/search&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&gt;ellipsisNone&lt;/option&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&gt;0&lt;/option&gt; &lt;option name="charting.axisLabelsY.majorUnit"&gt;10&lt;/option&gt; &lt;option name="charting.axisTitleX.visibility"&gt;collapsed&lt;/option&gt; &lt;option name="charting.axisTitleY.visibility"&gt;collapsed&lt;/option&gt; &lt;option name="charting.axisTitleY2.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisX.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisX.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY.maximumNumber"&gt;100&lt;/option&gt; &lt;option name="charting.axisY.minimumNumber"&gt;0&lt;/option&gt; &lt;option name="charting.axisY.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY2.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY2.enabled"&gt;0&lt;/option&gt; &lt;option name="charting.axisY2.scale"&gt;inherit&lt;/option&gt; &lt;option name="charting.chart"&gt;line&lt;/option&gt; &lt;option name="charting.chart.bubbleMaximumSize"&gt;50&lt;/option&gt; &lt;option name="charting.chart.bubbleMinimumSize"&gt;10&lt;/option&gt; &lt;option name="charting.chart.bubbleSizeBy"&gt;area&lt;/option&gt; &lt;option name="charting.chart.nullValueMode"&gt;connect&lt;/option&gt; &lt;option name="charting.chart.showDataLabels"&gt;none&lt;/option&gt; &lt;option name="charting.chart.sliceCollapsingThreshold"&gt;0.01&lt;/option&gt; &lt;option name="charting.chart.stackMode"&gt;default&lt;/option&gt; &lt;option name="charting.chart.style"&gt;shiny&lt;/option&gt; &lt;option name="charting.drilldown"&gt;none&lt;/option&gt; &lt;option name="charting.layout.splitSeries"&gt;0&lt;/option&gt; &lt;option name="charting.layout.splitSeries.allowIndependentYRanges"&gt;0&lt;/option&gt; &lt;option name="charting.legend.labelStyle.overflowMode"&gt;ellipsisMiddle&lt;/option&gt; &lt;option name="charting.legend.mode"&gt;seriesCompare&lt;/option&gt; &lt;option name="charting.legend.placement"&gt;right&lt;/option&gt; &lt;option name="charting.lineWidth"&gt;2&lt;/option&gt; &lt;option name="height"&gt;300&lt;/option&gt; &lt;option name="refresh.display"&gt;progressbar&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.scales.shared"&gt;1&lt;/option&gt; &lt;option name="trellis.size"&gt;medium&lt;/option&gt; &lt;/chart&gt; &lt;/panel&gt;</LI-CODE><P>&nbsp;</P><P><BR /><BR />bottonm chart:</P><P>&nbsp;</P><LI-CODE lang="markup"> &lt;panel id="gc_back"&gt; &lt;html&gt; &lt;style&gt; #gc_back{ width:30% !important; } &lt;/style&gt; &lt;/html&gt; &lt;chart&gt; &lt;title&gt;....Backend&lt;/title&gt; &lt;search&gt; &lt;query&gt;index=ascrm sourcetype=crm_log_gc crm_tier=backend "Pause Full (Diagnostic Command)" | timechart span=$span$ count by host&lt;/query&gt; &lt;earliest&gt;$time_infra.earliest$&lt;/earliest&gt; &lt;latest&gt;$time_infra.latest$&lt;/latest&gt; &lt;sampleRatio&gt;1&lt;/sampleRatio&gt; &lt;refresh&gt;$refresh_rate$&lt;/refresh&gt; &lt;refreshType&gt;delay&lt;/refreshType&gt; &lt;/search&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&gt;ellipsisNone&lt;/option&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&gt;0&lt;/option&gt; &lt;option name="charting.axisTitleX.visibility"&gt;collapsed&lt;/option&gt; &lt;option name="charting.axisTitleY.visibility"&gt;collapsed&lt;/option&gt; &lt;option name="charting.axisTitleY2.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisX.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisX.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY2.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY2.enabled"&gt;0&lt;/option&gt; &lt;option name="charting.axisY2.scale"&gt;inherit&lt;/option&gt; &lt;option name="charting.chart"&gt;line&lt;/option&gt; &lt;option name="charting.chart.bubbleMaximumSize"&gt;50&lt;/option&gt; &lt;option name="charting.chart.bubbleMinimumSize"&gt;10&lt;/option&gt; &lt;option name="charting.chart.bubbleSizeBy"&gt;area&lt;/option&gt; &lt;option name="charting.chart.nullValueMode"&gt;connect&lt;/option&gt; &lt;option name="charting.chart.showDataLabels"&gt;minmax&lt;/option&gt; &lt;option name="charting.chart.sliceCollapsingThreshold"&gt;0.01&lt;/option&gt; &lt;option name="charting.chart.stackMode"&gt;default&lt;/option&gt; &lt;option name="charting.chart.style"&gt;shiny&lt;/option&gt; &lt;option name="charting.drilldown"&gt;none&lt;/option&gt; &lt;option name="charting.layout.splitSeries"&gt;0&lt;/option&gt; &lt;option name="charting.layout.splitSeries.allowIndependentYRanges"&gt;0&lt;/option&gt; &lt;option name="charting.legend.labelStyle.overflowMode"&gt;ellipsisMiddle&lt;/option&gt; &lt;option name="charting.legend.mode"&gt;seriesCompare&lt;/option&gt; &lt;option name="charting.legend.placement"&gt;right&lt;/option&gt; &lt;option name="charting.lineWidth"&gt;2&lt;/option&gt; &lt;option name="height"&gt;300&lt;/option&gt; &lt;option name="refresh.display"&gt;progressbar&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.scales.shared"&gt;1&lt;/option&gt; &lt;option name="trellis.size"&gt;medium&lt;/option&gt; &lt;/chart&gt; &lt;/panel&gt;</LI-CODE><P>&nbsp;</P><P><BR />It seem all to be correct.<BR /><BR /><BR />But the charts haven't synchonous timelines.<BR /><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="timecharts_2.png" style="width: 808px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/16238i8AC3554B0E23180A/image-size/large?v=v2&amp;px=999" role="button" title="timecharts_2.png" alt="timecharts_2.png" /></span></P> Fri, 01 Oct 2021 09:25:53 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569204#M198394 n0cturne 2021-10-01T09:25:53Z https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569389#M198448 <P>That is interesting because I recreated your inputs and charts (of course with different searches, but also timechart ones) and they seem to be working fine. I noticed however that you posted this on 30.09.2021 but have data from 1.10.2021 already. If you have data from the future, you might hit similar issue as <A href="https://community.splunk.com/t5/Splunk-Enterprise/help-on-basic-question-about-span-in-timechart/m-p/569085#M10160" target="_blank">https://community.splunk.com/t5/Splunk-Enterprise/help-on-basic-question-about-span-in-timechart/m-p/569085#M10160</A></P> Fri, 01 Oct 2021 18:38:14 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-Same-time-range-and-span-but-different-timeline/m-p/569389#M198448 PickleRick 2021-10-01T18:38:14Z