Dashboards & Visualizations

Help me understand what is X-Axis and Y-axis in outliers Graph .


Hi All,

I have created a query to get the outliers of Duration In outliers graph. I am getting the results appropriate , but not able to understand what the x-axis means . It is creating with number (0,500,1000,1500 ....) with no name specified . Y-axis is duration range , here the name of Y-axis is series 2 ( think splunk has generated it ) but I am not able to change the name . I tried even in XML.

I cannot attach the screenshots . I am posting my query below. Please help me undertsand what the x-axis is and is there any way to change the code to get the timerange in x-axis .

index="XXX" source="XY" StartSession
| stats min(_time) as InTime by TraceID
| table InTime TraceID _time
| sort InTime
| join TraceID
[ search index="XXX" source="XY" EndSession
| stats max(_time) as OutTime by TraceID
| table OutTime , TraceID]
| eval Duration = (OutTime - InTime)
| eval lowerBound=0, upperBound=100
| eval isOutlier=if('Duration' < lowerBound OR 'Duration' > upperBound, 1, 0)
| fields _time, "Duration", lowerBound, upperBound, isOutlier, *

Here the _time field is not displaying anything .

Please help me understand what is X-axis and y-axis means here in outliers graph.
Can we change the "Series 2 " Name that appears in Y-Axis to "Duration " in any way ?


0 Karma
Get Updates on the Splunk Community!

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...