topic Re: Timechart span 1 week, starts from Monday 00:00 in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-create-a-Timechart-that-spans-1-week-starts-from-Monday/m-p/603166#M209912 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352">@gcusello</a>&nbsp;</P><P>Your advise helped, but with a bit modification. Simple:<BR />| timechart span=1w@w1<BR />works.</P><P>Thank you!!!</P> Fri, 24 Jun 2022 14:15:03 GMT JacobWrdz 2022-06-24T14:15:03Z How to create a Timechart that spans 1 week, starts from Monday 00:00 https://community.splunk.com/t5/Splunk-Search/How-to-create-a-Timechart-that-spans-1-week-starts-from-Monday/m-p/603140#M209901 <P>Hello,</P> <P>I couldn't find sufficient solution at documentation nor community.</P> <P>I have to setup timechart, where span=1w, to start at particular day: Monday 00:00.</P> <P>The query looks like this (I am sorry, I had to anonymity sensitive information):</P> <LI-CODE lang="markup">index=XXX sourcetype= YYY | eval Alrt_lvl = B_Lvl + Prio_diff | timechart span=1w count(Alrt_lvl) by Alrt_lvl</LI-CODE> <P>Kindly please advise.</P> Fri, 24 Jun 2022 16:02:37 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-Timechart-that-spans-1-week-starts-from-Monday/m-p/603140#M209901 JacobWrdz 2022-06-24T16:02:37Z Re: Timechart span 1 week, starts from Monday 00:00 https://community.splunk.com/t5/Splunk-Search/How-to-create-a-Timechart-that-spans-1-week-starts-from-Monday/m-p/603142#M209902 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/227951">@JacobWrdz</a>,</P><P>there's a workaround that should run but I never tested,&nbsp;&nbsp;</P><LI-CODE lang="markup">index=XXX sourcetype= YYY | eval Alrt_lvl = B_Lvl + Prio_diff, _time = relative_time(_time,"@w0") | timechart span=1w count(Alrt_lvl) by Alrt_lvl</LI-CODE><P>&nbsp;Ciao.</P><P>Giuseppe</P> Fri, 24 Jun 2022 10:17:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-Timechart-that-spans-1-week-starts-from-Monday/m-p/603142#M209902 gcusello 2022-06-24T10:17:56Z Re: Timechart span 1 week, starts from Monday 00:00 https://community.splunk.com/t5/Splunk-Search/How-to-create-a-Timechart-that-spans-1-week-starts-from-Monday/m-p/603166#M209912 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352">@gcusello</a>&nbsp;</P><P>Your advise helped, but with a bit modification. Simple:<BR />| timechart span=1w@w1<BR />works.</P><P>Thank you!!!</P> Fri, 24 Jun 2022 14:15:03 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-Timechart-that-spans-1-week-starts-from-Monday/m-p/603166#M209912 JacobWrdz 2022-06-24T14:15:03Z