https://community.splunk.com/t5/Splunk-Search/Only-show-every-7th-day-in-timechart/m-p/113073#M29707 <P>With timewrap, I think you want <CODE>timewrap w</CODE> not <CODE>d</CODE>.</P> <P>You could also do this manually. Here is another way</P> <PRE><CODE>index="mysql_uc_orders" earliest=-7d@d latest=now | bucket span=1m _time | timechart count span=30m | eval today=strftime(now(),"%A") | eval dayOfWeek = strftime(_time,"%A") | where dayOfWeek == today </CODE></PRE> Fri, 05 Sep 2014 20:07:55 GMT lguinn2 2014-09-05T20:07:55Z https://community.splunk.com/t5/Splunk-Search/Only-show-every-7th-day-in-timechart/m-p/113072#M29706 <P>Currently I have the following -</P> <P>index="mysql_uc_orders" earliest=-7d@d latest=now | bucket span=1m _time | timechart count span=30m | timewrap d</P> <P>This works fine as it shows the latest day and the 7th day but it also shows 1day, 2days, 3days etc.</P> <P>I'd like to only show the latest day and the 7 days before (I.e. week over week on a specific day).</P> <P>Does anyone know what filter I need to use?</P> Mon, 28 Sep 2020 17:30:13 GMT https://community.splunk.com/t5/Splunk-Search/Only-show-every-7th-day-in-timechart/m-p/113072#M29706 akhan8928 2020-09-28T17:30:13Z https://community.splunk.com/t5/Splunk-Search/Only-show-every-7th-day-in-timechart/m-p/113073#M29707 <P>With timewrap, I think you want <CODE>timewrap w</CODE> not <CODE>d</CODE>.</P> <P>You could also do this manually. Here is another way</P> <PRE><CODE>index="mysql_uc_orders" earliest=-7d@d latest=now | bucket span=1m _time | timechart count span=30m | eval today=strftime(now(),"%A") | eval dayOfWeek = strftime(_time,"%A") | where dayOfWeek == today </CODE></PRE> Fri, 05 Sep 2014 20:07:55 GMT https://community.splunk.com/t5/Splunk-Search/Only-show-every-7th-day-in-timechart/m-p/113073#M29707 lguinn2 2014-09-05T20:07:55Z