I have searching data from only first 6 days of each month i.e for example: from 1st April to 4th April 2020
My first time value is 04/01/2020 09:20 and the latest is 04/07/2020 07:05, but in the timeline chart visualization its displaying axis label as 04/01/2020 04/07/2020 04/14/2020 ........ 05/02/2020
Is it possible to force the timeline to display the full range of only my search, or manually set the time range?
I want the timeline to always displays the values which only in time field .
Any advice and assistance is appreciated. Thanks,
| makeresults count=2 | streamstats count | eval _time=if(count=1,relative_time(_time,"@mon"),relative_time(_time,"+1mon@mon+7d")) | makecontinuous span=1d _time | streamstats count as test | streamstats count(eval(test % 6 = 1)) as session | stats min(eval(round(_time))) as time by session | eval time=strftime(time,"%F") | table time session
If x-axis is text, it displays good.
@to4kawa Thank you for your reply.
I tried to execute the above sample query , but still in Timeline visualization , axis labels showing
04/05/2020 04/12/2020 04/19/2020 04/26/2020 05/03/2020
It should display as below for above sample query
04/01/2020 04/07/2020 04/13/2020 04/19/2020 04/25/2020 05/01/2020 05/07/2020