Dashboards & Visualizations

x-axis marks

Communicator

Hi everyone.
I have a 24-hours chart on a dashboard with marks on X axis every 6 hours.
How to make marks more frequent?

0 Karma

Communicator

Here's what I'm trying to explain:
there are martks 1:55, 2:00, 2:05....
And if I want them to be each 2 minutes, or each minute - what can I do?
alt text

0 Karma

Communicator

If you are using timechart you can use span option to do it.

http://docs.splunk.com/Documentation/Splunk/6.0.3/SearchReference/Timechart

span
Syntax: span= | span=
Description: Sets the size of each bucket, using a span length based on time or log-based span.

0 Karma

Communicator

Alright, I don’t know if there are any xml option (simple or advance) to do it but you can bucket your data in the time interval that you want and use it in the xseries of your chart in spite of using the default timechart capabilities.

I mean, | bucket span=6m time | eval mytime = strftime(time, "%H:%M:%S") | stats xxx by mytime

This should force the chart to mark your frequency.

0 Karma

Communicator

But that's about chart point frequency, not axis marks frequency. If it's clear what I'm trying to say..

0 Karma