Dashboards & Visualizations

Dashboard timechart x-axis does not show values, only the name of the label

is91
New Member

I don't see the value of the label on the x-axis if I don't zoom the graph (Line Chart).

I have only by example DATETIME and I would like to have ( 00:00, 01:00, 02:00 ....)

If someone can help me, it will be very appreciated.

0 Karma

effem
Communicator

Usually you would use timechart like this and it will give it automatically to you:

<your-search>| timechart span=1h average(your_field) as your_field_average

Let me know, if it was helpful.

0 Karma

is91
New Member

it doesn't work with my request because i am using "stats ...by" .
| stats avg(val1), avg(val2) by val3

if i want val3 on x-axis with the detail, i must do a zoom . Val3 could be a time or another value.

it is a dashboard with line-chart :

0

1

-45
1
line
none
none
0
seriesCompare
top
progressbar

0 Karma

effem
Communicator

Hi,

i just tested:

index="_internal" | timechart avg(executes) as a_executes avg(cumulative_hits) as a_hits

and

index="_internal" | stats avg(executes) as a_executes avg(cumulative_hits) as a_hits by _time

Both draw 2 lines with time as a X-axes. If you use timechart you will always have time on the x-axes.
With stats by you can haven your grouping on the x-axes.

0 Karma

is91
New Member

I don't understand why I have not a good information on x-axis with my request. I put it in a dashboard and it depend on the size on my window .Sometimes I have the information, sometimes not .

    "  <earliest>$t_time.earliest$</earliest>
      <latest>$t_time.latest$</latest>
      <sampleRatio>1</sampleRatio>
    </search>
    <option name="charting.axisLabelsX.majorLabelStyle.rotation">-45</option>
    <option name="charting.axisY.scale">log</option>
    <option name="charting.axisY2.enabled">0</option>
    <option name="charting.chart">line</option>
    <option name="charting.chart.nullValueMode">connect</option>
    <option name="charting.chart.overlayFields">SIGNAL</option>
    <option name="charting.chart.showDataLabels">none</option>
    <option name="charting.drilldown">none</option>
    <option name="charting.layout.splitSeries">0</option>
    <option name="charting.legend.mode">seriesCompare</option>
    <option name="charting.legend.placement">top</option>
    <option name="refresh.display">preview</option>
  </chart>"
0 Karma

harshpatel
Contributor

Hi @is91,

If you could provide the screenshot with search it would be helpful.

0 Karma

alonsocaio
Contributor

Could you provide the search query that generates this chart?

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...