https://community.splunk.com/t5/Splunk-Search/Default-span-size-change/m-p/81193#M20535 <P>AFAIK, there is no way to change the default span. The times.conf file is where "Last 7 days" is defined - but times.conf does <EM>not</EM> specify the default span for the timechart command.</P> Wed, 09 Jan 2013 02:32:10 GMT lguinn2 2013-01-09T02:32:10Z https://community.splunk.com/t5/Splunk-Search/Default-span-size-change/m-p/81192#M20534 <P>Is it possible to adjust the default span size for a given time-range?</P> <P>When using timechart the default span size works fine unless I choose "Last 7 days" , at which point the span size is 1day, meaning I have 7 data points. I would much prefer to have at least 28 datapoints (ie span=6h) to make a meaningful graph.</P> <P>Where, if anywhere, can I change the default span size for "Last 7 days"?</P> Tue, 08 Jan 2013 17:58:17 GMT https://community.splunk.com/t5/Splunk-Search/Default-span-size-change/m-p/81192#M20534 unclethan 2013-01-08T17:58:17Z https://community.splunk.com/t5/Splunk-Search/Default-span-size-change/m-p/81193#M20535 <P>AFAIK, there is no way to change the default span. The times.conf file is where "Last 7 days" is defined - but times.conf does <EM>not</EM> specify the default span for the timechart command.</P> Wed, 09 Jan 2013 02:32:10 GMT https://community.splunk.com/t5/Splunk-Search/Default-span-size-change/m-p/81193#M20535 lguinn2 2013-01-09T02:32:10Z