Dashboards & Visualizations

Displaying duration in human-readable format instead of seconds on chart by axis Y?

greg
Communicator

I have an advanced XML chart that displays duration in seconds on axis Y.

Sometimes, when the values are high, axis labels become difficult to interpret:

alt text

Can I set the labels in human-readable format, in appropriate value range, like this:

alt text

So far I've just set the axis type as

<param name="charting.axisY">time</param>

to have duration converted to epoch time (starting from 1970-10-01).

However for big duration values my workaround doesn't look very well since full date timestamps are included into label markers for the bottom and top values on the Y-axis.

alt text

Is there any way to configure a label convertor for the proper time scale?

lguinn2
Legend

In the search, where you are calculating the duration, can you add

 | fieldformat timeVariable = tostring(timeVariable,"duration")

I don't know if this will help on the chart in advanced XML, but it would make the durations look better in a table...

lguinn2
Legend

I don't think there is a way to use one representation (such as epoch time) for the data values and a different (though corresponding) representation for the scale... if fieldformat doesn't do it, then I don't know what will.

0 Karma

greg
Communicator

As for the tabular data, yes, I've already done so.
But still looking for a solution on axis labels...

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...