Reporting

Can this Report be improved - and the Month shown on the x axis

Skins
Path Finder

At this time if i run this over 4 months the x axis shows Month, day - all i want to see is month.

And can this search be improved ?

gratzi

index=response source=responsetimes 
| table _time, ACTION_TIME
| sort - ACTION_TIME
| convert rmcomma(ACTION_TIME)
| eval ACTION_TIME = (ACTION_TIME/1000)
| timechart avg(ACTION_TIME) as "Average" span=1d
| append [search index=response source=responsetimes
| table _time, ACTION_TIME 
| sort - ACTION_TIME
| convert rmcomma(ACTION_TIME)
| eval ACTION_TIME = (ACTION_TIME/1000)
| eventstats p5(ACTION_TIME) as top5perc
| where ACTION_TIME < top5perc 
| timechart avg(ACTION_TIME) as "Top 5%" span=1d]
| append [search index=response source=responsetimes
| table _time, ACTION_TIME 
| sort - ACTION_TIME
| convert rmcomma(ACTION_TIME)
| eval ACTION_TIME = (ACTION_TIME/1000)
| eventstats p95(ACTION_TIME) as bottom5perc
| where ACTION_TIME > bottom5perc 
| timechart avg(ACTION_TIME) as "Bottom 5%" span=1d]
| timechart first(*) as *
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...