Hi there. I hope someone can help.
I am trying to create a distribution graph based on frequency of the number of times a file of a specific size is used over our AHFT service.
I have the quantities, but need to set a custom internal of around 20-30 on the x-axis. I have successfully resolved this on another graph, but this was time based so was able to use the timechart option.
How do you change the interval span for numeric values on the x-axis?
Please see below:
index=mail MAILHOST.co.uk NOT To="support@splunk.com, HOST.co.uk" | rex field=_raw "(?m)_____\s+A\s+file\s+has\s+been\s+sent\s+to\s+you\s+by\s* (?<AHFT_From>.*\))" | rex field=_raw "(?m)its\s+size\s+is\s*(?<FileSize>.*)\s+bytes" | search FileSize="*" AHFT_From="*" linecount=39 | eval FileSize = round(FileSize/1024/1024) | stats count by FileSize | sort by FileSize stats count by FileSize | sort by FileSize
Any help would be greatly appreciated.
Kind regards,
Rob.
