Dashboards & Visualizations

Displaying duration in human-readable format instead of seconds on chart by axis Y?

greg
Communicator

I have an advanced XML chart that displays duration in seconds on axis Y.

Sometimes, when the values are high, axis labels become difficult to interpret:

alt text

Can I set the labels in human-readable format, in appropriate value range, like this:

alt text

So far I've just set the axis type as

<param name="charting.axisY">time</param>

to have duration converted to epoch time (starting from 1970-10-01).

However for big duration values my workaround doesn't look very well since full date timestamps are included into label markers for the bottom and top values on the Y-axis.

alt text

Is there any way to configure a label convertor for the proper time scale?

lguinn2
Legend

In the search, where you are calculating the duration, can you add

 | fieldformat timeVariable = tostring(timeVariable,"duration")

I don't know if this will help on the chart in advanced XML, but it would make the durations look better in a table...

lguinn2
Legend

I don't think there is a way to use one representation (such as epoch time) for the data values and a different (though corresponding) representation for the scale... if fieldformat doesn't do it, then I don't know what will.

0 Karma

greg
Communicator

As for the tabular data, yes, I've already done so.
But still looking for a solution on axis labels...

Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...