How do I change what is displayed when I mouseover a sparkline?

[RedHonda03]

I've created a sparkline that shows events which have occurred over a date/time range. Currently, when I place my mouse on the line, it shows the event counts. So if a user account failed to log on 5 times, I see the number 5 when I place the cursor on the spike. Instead of displaying the number 5 in the box when the cursor is on the line, I want to see the date/time that spike occurred.

[niketn]

@RedHonda03, sparkline might not be correct way to show _time information along with stats. However, if you are on Splunk Enterprise 7 you should check out Event Annotation

[p_gurav]

can you share query?