Dashboards & Visualizations

i want to create a line chart which contain same label for x-axis for 3 values.

splunk47
New Member

i want to create a line chart which contain same label for x-axis for 3 values. suppose x-axis has label named Day. this line chart has three data values for same Day 11-02-2015 . Now for all the three data values its showing the labbel 11-020-2015 three times on the X-axis. But i want this to show only one time for all the three data values. How to do that

Tags (1)
0 Karma

skoelpin
SplunkTrust
SplunkTrust

Check out the timewrap app. This will give you a timechart over a 24 hour period with different color lines relative to the day.

Once you download the Splunk timewrap app and install it then restart your Splunk server, you can then pipe your search into timewrap

Below is an example of a timewrap search I run.. You set the timeframe which shows how far you want to go back in time (-2d@d) and you pipe everything into timewrap then put d/w/m/y depending on what units of time you want

index=unleashed Call="CreateOrder" earliest=-2d@d | timechart count by Call | timewrap d
0 Karma

woodcock
Esteemed Legend

You have not even shows us your base search; how are we supposed to answer? What you are describing is highly-irregular behavior for Splunk and I'm not sure how you have gotten it to do what you are describing (which I agree, is undesirable).

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...