Change y axis scale to logarithmic scale

[axsolis]

I know it is possible to change the scale of the y axis to log scale but I am not having any luck finding the answer. Can someone point me in the right direction or give me the XML option code that will do this for my line chart?

Thanks!

[cfoleydivert]

A simple and direct answer for this is to use "Format Visualization". I found this in the Search Tutorial manual (after looking in several other manuals, experimenting unsuccessfully in my case using the log() function with the timechart command; also found only way in Splunk Light Cloud to edit the formatting xml to be in the Dashboard feature, not right in Visualization).

Working in Splunk Light Cloud, display results with Visualization tab; in the upper left there are three links - click the Format one:

In that dialog, pick the Y-Axis button on the left and change the Scale from Linear to Log:

[vbumgarner · Accepted solution]

    <option name="charting.axisY.scale">log</option>

Appears to be answer.

[rogerdpack]

Another option that doesn't require manual editing of the panel is computing the log, like: ... | eval a=log(validated_count) | timechart sum(a)

[Simeon]

Maybe you are looking for this flag:

Log span syntax

<log-span>
Syntax: [<num>]log[<num>]
Description: Sets to log-based span. The first number is a
coefficient. The second number is the
base. If the first number is supplied,
it must be a real number >= 1.0 and <
base. Base, if supplied, must be real
number > 1.0 (strictly greater than1).

http://www.splunk.com/base/Documentation/latest/SearchReference/Timechart1).

[axsolis]

Thank you for the response.

I saw this but I dont know how to use this option. Could you please give an example where this is used to convert the Y axis of a timechart into logarithmic scale?

Any help is greatly appreciated.

[jpanderson]

It is an option for the timechart search command:

http://docs.splunk.com/Documentation/Splunk/6.1/SearchReference/timechart