topic how to change the lables of x axis of a bar graph in Splunk Search

how to change the lables of x axis of a bar graph

anooshac — Tue, 11 Jan 2022 06:54:16 GMT

Hi all,

I have to plot a bar graph in which duration in hours will be in x axis and number of tasks will be in y axis. I want to specify the label of x axis as 0-1(hr), 1-2(hr), 2-3(hr),.... Can anyone please help me in doing this.

Re: how to change the lables of x axis of a bar graph

ITWhisperer — Tue, 11 Jan 2022 07:39:16 GMT

bin span=1 will do this for you

Re: how to change the lables of x axis of a bar graph

anooshac — Wed, 12 Jan 2022 05:00:14 GMT

| eval duration=(TASK_DURATION)/3600000|chart distinct_count(TASK_NUM) as task by duration| makecontinuous duration | bin duration span=1

I have used the query like this and i'm getting the following results. This is the result that i got

Re: how to change the lables of x axis of a bar graph

ITWhisperer — Wed, 12 Jan 2022 08:29:29 GMT

Use floor on the division otherwise you are charting by fractions of hours.

| eval duration=floor((TASK_DURATION)/3600000)

Re: how to change the lables of x axis of a bar graph

anooshac — Wed, 12 Jan 2022 10:17:49 GMT

Thank you so much!! It is working fine.. I have one small query, if we have to make interval as 0-2, 2-4, 4-6... i have to change span=2 right? i tried and i am getting repeated values in the table.

Re: how to change the lables of x axis of a bar graph

ITWhisperer — Wed, 12 Jan 2022 10:43:46 GMT

You would have do it slightly differently

| makeresults count=20 | eval duration=random() % 20 | eval count=random() % 20 ``` this bin groups duration in 2's for the stats - note the s after the 2 (this keeps the duration as numbers rather than strings of ranges) ``` | bin duration span=2s | stats sum(count) as count by duration | sort 0 duration | makecontinuous duration ``` this bin converts the duration to a string range - note the removal of the s ``` | bin duration span=2

Re: how to change the lables of x axis of a bar graph

anooshac — Thu, 13 Jan 2022 04:18:15 GMT

Thank you so much!

Re: how to change the lables of x axis of a bar graph

anooshac — Thu, 13 Jan 2022 12:35:17 GMT

I have one doubt.. need one more help from you.. The x axis is showing ranges that are too high.. for example 200-202 which doesn't have data in the y axis. How can i limit the range of x axis?

Re: how to change the lables of x axis of a bar graph

ITWhisperer — Thu, 13 Jan 2022 13:15:55 GMT

Take out the makecontinuous

Re: how to change the lables of x axis of a bar graph

anooshac — Wed, 19 Jan 2022 16:27:25 GMT

Thank you..

Since the bar graph is having a lot of values in x axis i'm trying to limit the values. I'm trying to group the values into 3. One which has duration less than 15, second one having duration between 15 to 25 and last one having duration greater than 25.

        | eval red = if(duration>25,duration,0)
        | eval yellow = if(duration<=25 AND duration>15,duration,0)
        | eval green = if(duration<=15, duration, 0)

I have tried like this but i think this is not how its done. Do you have any idea on this. Can you please help me on this.