Dashboards & Visualizations

How to eliminate x axis chart time options

joesrepsolc
Communicator

Collecting summary data into a summary index every hour. Data will only have events at 8am, 9am, 10am etc. On my timechart panel Splunk still shows 8:10, 8:20, 8:30 etc and my data bars are spaced out really far. Tried span=1h but it still displays this way. Only going to be 24 values a day for each application I chart. How can I get these bars to show closer together, use a wider bar for each value? Dont like the super skinny bar width and spacing. Thanks!

 

x_axis_change.png

Labels (1)
0 Karma

niketn
Legend

how about timechart with cont=f, for example:

<yourCurrentSearch>
| timechart count by Application cont=f 

Or use stats to plot _time like

<yourCurrentSearch>
| bin _time span=1h 
| stats count by _time Application

Both these approach will plot for only the Time for which data is present hence your chart should not have gap!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...