Dashboards & Visualizations

Getting Regularly distributed X-axis which contains Date (Time) values on it

ameytalkatkar
New Member

Hello Sir/Madam,
I am having "csv" files from where I am importing data to Splunk. This csv file has field "Date" which I want my report to plot on X-axis. Now my query is running fine and displaying report. The "csv" file has data information with 5 mins separation that is each row displays data for 5 mins and so on. Now this file does not contain all the 5-mins data and sometimes some entries are missing for 5-mins. e.g. it may contain below values for Date column:

2012-07-27 06:45:00+00:00, 2012-07-27 06:50:00+00:00, 2012-07-27 06:55:00+00:00, 2012-07-27 07:00:00+00:00, 2012-07-27 07:20:00+00:00, 2012-07-27 07:25:00+00:00, 2012-07-27 07:30:00+00:00, 2012-07-27 07:35:00+00:00, 2012-07-27 07:40:00+00:00, 2012-07-27 07:45:00+00:00

As mentioned here some of the time entries for Date column are missing. Now I want my report to show continuous report i.e. for the time between 2012-07-27 07:00:00+00:00 and 2012-07-27 07:20:00+00:00 it should show break in the graph and but Date information should be present on X-axis. Please note that I am using "line" type of graph in reports.
I hope I am clear here. Any kind of help will really be appreciated.
Thanks Amey

Tags (1)
0 Karma

jonuwz
Influencer

Assuming that _time contains your time values :

putting this after your chart

| makecontinuous _time

usually sorts it out.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...