Dashboards & Visualizations

How to turn off automatic binning of line graphs?

splunkskxawng
New Member

Anomalous data is being lost in line graphs, and I suspect it is the automatic binning. I tried to turn off binning with

eventtype=rack_1_pdu_1 | timechart bins=0 values(PduPowerLevel) as power

but got an error message saying bins must between 2 and 50000. Tried bins=2 and uncovered one missing value, but have not been able to find a bins setting that makes all data visible. Is there some way I can get control over binning so that I can see all the collected events? I am a newbie, so please be kind if this is a stupid question.

0 Karma

dkeck
Influencer

HI,

I don´t know if I get your question, but do you want to have all the values and not get them combined in others in timechart ??

than just use | timechart useother=f values(PduPowerLevel) as power .

0 Karma

dkeck
Influencer

Is this what you were looking for?

if it helped please accept the question 🙂

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...