<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to create a timechart with charting.legend.labels, but maintain the x-axis label format and color two lines red and blue? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-timechart-with-charting-legend-labels-but/m-p/259497#M77777</link>
    <description>&lt;P&gt;You can always set explicit mapping for your charting series like so:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;option name="charting.fieldColors"&amp;gt;
    {"field_kum":0xFF0000,"field_sum":0x0000FF}
&amp;lt;/option&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;That will always set &lt;CODE&gt;field_kum&lt;/CODE&gt; to red and &lt;CODE&gt;field_sum&lt;/CODE&gt; to blue&lt;/P&gt;</description>
    <pubDate>Tue, 06 Oct 2015 16:22:22 GMT</pubDate>
    <dc:creator>mporath_splunk</dc:creator>
    <dc:date>2015-10-06T16:22:22Z</dc:date>
    <item>
      <title>How to create a timechart with charting.legend.labels, but maintain the x-axis label format and color two lines red and blue?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-timechart-with-charting-legend-labels-but/m-p/259496#M77776</link>
      <description>&lt;P&gt;I have a timechart with two lines (sum and max of values). Have a problem with the display format of the x-axis. It is now: &lt;CODE&gt;ddd mm.yy&lt;/CODE&gt; (11. Okt 15). &lt;BR /&gt;
If I insert a line of &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;option name ="charting.legends.labels"&amp;gt;[field_kum,field_sum]&amp;lt;/option&amp;gt; 
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;then the display format of the x-axis changes: i.E. &lt;CODE&gt;2015-10-15T00:00:00.0000 +02&lt;/CODE&gt;. Why? &lt;BR /&gt;
Can anybody help me? &lt;BR /&gt;
I need it, while I must have the line color for the two fields exactly as red and blue. If I don't have this label-line, then it will be randomly blue/red or red/blue... &lt;span class="lia-unicode-emoji" title=":disappointed_face:"&gt;😞&lt;/span&gt;&lt;BR /&gt;
I must use a timechart, not a chart!&lt;BR /&gt;
thank you&lt;/P&gt;</description>
      <pubDate>Tue, 06 Oct 2015 09:43:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-timechart-with-charting-legend-labels-but/m-p/259496#M77776</guid>
      <dc:creator>hunyady</dc:creator>
      <dc:date>2015-10-06T09:43:08Z</dc:date>
    </item>
    <item>
      <title>Re: How to create a timechart with charting.legend.labels, but maintain the x-axis label format and color two lines red and blue?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-timechart-with-charting-legend-labels-but/m-p/259497#M77777</link>
      <description>&lt;P&gt;You can always set explicit mapping for your charting series like so:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;option name="charting.fieldColors"&amp;gt;
    {"field_kum":0xFF0000,"field_sum":0x0000FF}
&amp;lt;/option&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;That will always set &lt;CODE&gt;field_kum&lt;/CODE&gt; to red and &lt;CODE&gt;field_sum&lt;/CODE&gt; to blue&lt;/P&gt;</description>
      <pubDate>Tue, 06 Oct 2015 16:22:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-timechart-with-charting-legend-labels-but/m-p/259497#M77777</guid>
      <dc:creator>mporath_splunk</dc:creator>
      <dc:date>2015-10-06T16:22:22Z</dc:date>
    </item>
  </channel>
</rss>

