x-axis marks

[0range]

Hi everyone.
I have a 24-hours chart on a dashboard with marks on X axis every 6 hours.
How to make marks more frequent?

[0range]

Here's what I'm trying to explain:
there are martks 1:55, 2:00, 2:05....
And if I want them to be each 2 minutes, or each minute - what can I do?

[bfernandez]

If you are using timechart you can use span option to do it.

http://docs.splunk.com/Documentation/Splunk/6.0.3/SearchReference/Timechart

span
Syntax: span= | span=
Description: Sets the size of each bucket, using a span length based on time or log-based span.

[bfernandez]

Alright, I don’t know if there are any xml option (simple or advance) to do it but you can bucket your data in the time interval that you want and use it in the xseries of your chart in spite of using the default timechart capabilities.

I mean, | bucket span=6m _time | eval mytime = strftime(_time, "%H:%M:%S") | stats xxx by mytime

This should force the chart to mark your frequency.

[0range]

But that's about chart point frequency, not axis marks frequency. If it's clear what I'm trying to say..