All Apps and Add-ons

How do I control the time range of the x-axis when using the timewrap command?

HattrickNZ
Motivator

I have the following search using the timewrap command to look at the values across each day:

...| timechart  span=15m min(c84150606) as "MIN CONNECTED RATIO" by type | timewrap d series=exact

How do I control the time frame of the x-axis?

It currently does 10.45am to 10.30am on the xaxis.

I want it to show midnight to 2300 i.e. include data from 00.00 .00 to 23.59.59

Can this be done?

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

This should happen automatically once you snap your time range to the start of day.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

This should happen automatically once you snap your time range to the start of day.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Odd. Try this: earliest=-7d@d latest=+d@d

HattrickNZ
Motivator

tks that is wroking for me now.
index=.... earliest=-7d@d latest=+d@d | timechart span=15m avg(KPI1) by DeviceName | timewrap d series=exact

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Snapping earliest matters, so you can use now for latest.

0 Karma

HattrickNZ
Motivator

tks but i am doing earliest=-7d@d latest=now and it is not giving any values for today. Am I doing something wrong?

0 Karma

HattrickNZ
Motivator

do you mean earliest=@d?

0 Karma

HattrickNZ
Motivator

got something like this to work earliest=-7d@d latest=@d but this does not show the values for today. How can i do this?

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...