topic Ingore last result in timechart in Splunk Search https://community.splunk.com/t5/Splunk-Search/Ingore-last-result-in-timechart/m-p/322643#M96331 <P>Hello i have a search query with timechart function but i don't want to display last bucket because it shows not complete data.<BR /> I use 5m span and i would like to display ONLY the time frames that have completely passed. Is there an easy way to achieve this?</P> Mon, 22 Jan 2018 12:34:14 GMT Ponczi1 2018-01-22T12:34:14Z Ingore last result in timechart https://community.splunk.com/t5/Splunk-Search/Ingore-last-result-in-timechart/m-p/322643#M96331 <P>Hello i have a search query with timechart function but i don't want to display last bucket because it shows not complete data.<BR /> I use 5m span and i would like to display ONLY the time frames that have completely passed. Is there an easy way to achieve this?</P> Mon, 22 Jan 2018 12:34:14 GMT https://community.splunk.com/t5/Splunk-Search/Ingore-last-result-in-timechart/m-p/322643#M96331 Ponczi1 2018-01-22T12:34:14Z Re: Ingore last result in timechart https://community.splunk.com/t5/Splunk-Search/Ingore-last-result-in-timechart/m-p/322644#M96332 <P>this is a bit tedious, but should get you what you need.</P> <PRE><CODE>....|&lt;timechart&gt;|reverse|streamstats count|search count&gt;1|reverse </CODE></PRE> Mon, 22 Jan 2018 12:43:42 GMT https://community.splunk.com/t5/Splunk-Search/Ingore-last-result-in-timechart/m-p/322644#M96332 cmerriman 2018-01-22T12:43:42Z Re: Ingore last result in timechart https://community.splunk.com/t5/Splunk-Search/Ingore-last-result-in-timechart/m-p/322645#M96333 <P>Timechart has a command option call <STRONG>partial</STRONG>. By default this is set to true, so set this to false. Only the first and last buckets can be partials. <A href="http://docs.splunk.com/Documentation/SplunkCloud/6.6.3/SearchReference/Timechart">http://docs.splunk.com/Documentation/SplunkCloud/6.6.3/SearchReference/Timechart</A></P> <P>...| timechart partial=False count by foo</P> Mon, 22 Jan 2018 17:28:49 GMT https://community.splunk.com/t5/Splunk-Search/Ingore-last-result-in-timechart/m-p/322645#M96333 bmacias84 2018-01-22T17:28:49Z Re: Ingore last result in timechart https://community.splunk.com/t5/Splunk-Search/Ingore-last-result-in-timechart/m-p/322646#M96334 <P>can you provide the <CODE>timechart</CODE> query that you have?</P> Mon, 22 Jan 2018 17:34:05 GMT https://community.splunk.com/t5/Splunk-Search/Ingore-last-result-in-timechart/m-p/322646#M96334 mayurr98 2018-01-22T17:34:05Z