https://community.splunk.com/t5/Splunk-Search/How-to-split-time-into-3-shifts-with-labels-on-x-axis/m-p/598603#M208434 <LI-CODE lang="markup">| table shift count</LI-CODE> Fri, 20 May 2022 05:05:35 GMT ITWhisperer 2022-05-20T05:05:35Z https://community.splunk.com/t5/Splunk-Search/How-to-split-time-into-3-shifts-with-labels-on-x-axis/m-p/598593#M208430 <P>Hi, I have a timechart that is currently split into 8-hour shift bins, however as it is a timechart, the x-axis only shows the timestamps, while I would like the bins to be labeled by their shifts.</P><P>Sample data:</P><P><U><STRONG>Count | Time | Shift</STRONG></U></P><P>500 | 0700 (Yesterday) | Shift A</P><P>750 | 1500 (Yesterday) | Shift B</P><P>500 | 2300 (Yesterday) | Shift C</P><P>700 | 0700 (Today) | Shift A</P><P>600 | 1500 (Today) | Shift B</P><P>&nbsp;</P><P>One tricky part is that "Shift C" overlaps between 2 dates as well.<BR />Any ideas on how to define the time range for the shifts, then split and label the bins by their shifts would be greatly appreciated. Thanks!</P> Fri, 20 May 2022 07:43:33 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-time-into-3-shifts-with-labels-on-x-axis/m-p/598593#M208430 dzyfer 2022-05-20T07:43:33Z https://community.splunk.com/t5/Splunk-Search/How-to-split-time-into-3-shifts-with-labels-on-x-axis/m-p/598603#M208434 <LI-CODE lang="markup">| table shift count</LI-CODE> Fri, 20 May 2022 05:05:35 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-time-into-3-shifts-with-labels-on-x-axis/m-p/598603#M208434 ITWhisperer 2022-05-20T05:05:35Z