You need to make the charts the same width (obviously) and make sure the parts to the left and right of the charts are the same width. Specifically, either move the legend to the top/bottom or make sure the fields are the same length or remove the legends and make sure the Y-axis scales are the same length. Then you should see the markers align on their own.
Are you searching over all time?
Note, I've had some issues surrounding empty buckets gone missing at the beginning or end of a timechart in the past, not sure if they still exist. If you're not searching over all time and not setting fixedrange=f
but still don't get buckets with count=0
at the beginning or end that would fall within the timerange but don't have any data in them you should file a case that timechart
is a bit broken here.
Have you considered a search for all your sources and a count by source to get one chart?
You could upload your screenshot somewhere (e.g. imgur.com) and post the URL.
Here's an example: https://dl.dropboxusercontent.com/spa/jq9rmutima7jf7v/z8r5huo1.png
Notice how the alignment depends on the number of events at the beginning of the time range. I tried forcing fixedrange=True and using per_day(), but none of those gives me an absolute time range.
That's not quite enough. I've removed the legends and the panels on the dashboard are aligned but the problem seems to be the time markers (and report) adjusts the view and time markers depending on the data. I just created an example where (on my macbook) I added the following reports to a dashboard (both the same time range of 1 week):
source=/var/log/system.log | timechart span="1h" count
source=/var/log/commerce.log | timechart span='1h" count
and the time is not aligned. I tried to attach a screenshot but I don't have enough karma. What I really want is to be able to control the X-axis in the report controls, but option isn't provided.