Comparing Today's & Yesterday's data, why is it showing the same date for both sets of data when we hover over the graph?

[harish_ka]

I have tried to show the data comparison of yesterday with today. It shows correctly, but the date it shows when we hover on the graph is wrong.
It shows the same date for both today & yesterday graph.

Is there any way to fix this or to ignore the Date when we hover??
Please help me to fix this.

I have used eval new_time=_time+86400 to match today's time...

[jeffland]

Because you asked "Is there any way to ignore the Date when we hover": yes, there is. Place a .css file in

your_app_name/appserver/static

and give it this content

div > span > table > tbody > tr:nth-child(1) > td {
    display: none;
}

Restart splunk, and include the .css file in your dashboard (add stylesheet="your_css.css" to the first tag). That should take care of your dates, but it might also remove labels from other charts. If you find it doesn't work as expected, you might need to change the way this element is addressed to be more specific to the chart you want this to work on.

[lguinn2]

The only way to get today and yesterday to overlap on the same timeline is to adjust the time. Once you have done that, yesterday's data will have the same date.

There isn't any easy way around this that I know of. You might try the timewrap app; it's free and makes these kinds of graphs very simple.

[harish_ka]

Thanks for your comments @lguinn.
But i cant use any apps.
So we dont have a solution for this rather than using timewrap app??

[lguinn2]

The "problem" is that there is only 1 X-axis on the chart - there can't be two timelines at once. I don't believe that there is any way to have multiples - so that is correct.

And the timewrap app just makes these kinds of comparisons easier; I don't think that it creates more than one X-axis either.