Dashboards & Visualizations

Day field is messed up in graph ??

rakesh_498115
Motivator

Hi .

i have plotted the line graph using the following query .

| inputlookup statsdata.csv | eval _time=strptime(Day,"%d-%B-%y") | fields _time,AvgBest95,Mean95,UCL95,LCL95

when i use this the _time field is not displaying on the x-axis..

Wat could be the problem ? if all the dates are not displayed can we intermediate dates atlest ..
i.e i have records for the past three months in my statsdata file..so for all these records can i have the intermediate dates displayed on the x-axis, cause it looks awkward with no data displayed on x-axis..

Please help..

thanx

Tags (2)
0 Karma

jonuwz
Influencer

You need to use timechart.

This emulates your data :

| gentimes start=-150 | eval date=strftime(starttime,"%d-%B-%y") | streamstats count as AvgBest95 | search (AvgBest95!=*7) | table date AvgBest95

there's a date missing if AvgBest95 contains a 7

adding this :

| eval _time=strptime(date,"%d-%B-%y") | timechart span=1d avg(AvgBest95)

charts your data with dates on the X axis

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...