All Apps and Add-ons

TimeWrap Bug?

DPZ_Luke
Explorer

So I think this may be a bug. Timewrap seems to only take single number h,w,m values.
For example, this
sourcetype="wineventlog:application" "Type=Warning" "EventCode=1" earliest=-4w | timechart count span=1h | timewrap 19h series=relative
Will plot graphs of every 9 hours, NOT every 19 hours.
Ditto if I make it timewrap 11h, it will be 1 hour not 11 hours.

Comments?

Tags (1)
1 Solution

carasso
Splunk Employee
Splunk Employee

Thanks. I just fixed it.

I also threw in a new command called 'drilldown' that handles "* | top 10 host useother=t", which allows you to drilldown on 'other' values and do the right thing.

View solution in original post

0 Karma

carasso
Splunk Employee
Splunk Employee

Thanks. I just fixed it.

I also threw in a new command called 'drilldown' that handles "* | top 10 host useother=t", which allows you to drilldown on 'other' values and do the right thing.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...