Dashboards & Visualizations

splunk timechart skipping x axis - months

Bentash
Explorer

| timechart span=1mon count by "members" keep skipping month.
I want it to be more cosistent and show all months.
alt text

why August, October, December are not populating their text when there is clearly a count visible

Tags (2)
0 Karma
1 Solution

kmaron
Motivator

If you change the label rotation it should work.

Under Format click the tab for X-axis. Then change your Label Rotation to -90.

View solution in original post

kmaron
Motivator

If you change the label rotation it should work.

Under Format click the tab for X-axis. Then change your Label Rotation to -90.

Bentash
Explorer

thanks.. that worked after rotating them

0 Karma

cmerriman
Super Champion

is it a month with no data? can you try to add |makecontinuous _time span=1mon before the timechart? you can also add limit=0 to your timechart to make sure no members get excluded.

http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/Makecontinuous

Bentash
Explorer

| where _time>=info_min_time AND (_time<=info_max_time OR info_max_time="+Infinity")
| makecontinuous _time
| timechart span=1mon count by "members" limit=0

Tried this but didnt work

0 Karma

skoelpin
SplunkTrust
SplunkTrust

It looks like he's asking why August, October, December are not populating their text when there is clearly a count visible

0 Karma

cmerriman
Super Champion

wow i wildly misread that question. My mistake. if you can put this in a dashboard (or if it already is in one) you can adjust the axis label.
charting.axisLabelsX.majorLabelStyle.rotation in simpleXML to rotate it 45 or 90 degrees. that will probably help.
http://docs.splunk.com/Documentation/SplunkCloud/6.6.3/Viz/ChartConfigurationReference#Area.2C_Bubbl...

0 Karma

Bentash
Explorer

45 tried this but still not showing all months.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...