How can I use a Chart Overlay with an epoch field and convert it to a human readable format?

[felipesewaybric]

How can I use Chart Overlay with an epoch field converting the same in time?

I have 2 fields, one is Intevalo with epoch time, and the other called Tempo Limite with the epoch turned into time with 'duration'.

How can I set the chart overlay to time, like 01:22:04 or something like that.

[aljohnson_splun · Accepted solution]

EDITED:

I don't know if you can do this. Every attempt I've made at changing this value into a string breaks the overlay.

Maybe the closest thing is just converting those seconds to minutes...

... | eval duration = round(duration/60, 2)

[felipesewaybric]

That works only in the table, but not with chart overlay

[aljohnson_splun]

Did you try selecting formatted_time in the chart overlay field input in the visualization formatting drop down menu ? It should work for both.

[felipesewaybric]

yes, and wont work, only apears in the epoch time, example:

with formatted_time -> 02:08:00 wont show the line
without formatted_time -> 18480.639752 show the line

[aljohnson_splun]

Hmm. Can you edit your original question - please add your search and talk about what other values are present (like, whats on the x axis)

[felipesewaybric]

[aljohnson_splun]

I think see the problem. As for the dentro do tempo medio and Intervalo fields - those are numbers of seconds, right ? That is pretty different from epoch time.

So are you just trying to convert those seconds into hours, minutes? It sounded in you original question like you knew how to use eval to ge duration

... | eval Intervalo = tostring(Intervalo, "duration")

Or you could even try using fieldformat instead of eval, if need be ?

---

[felipesewaybric]

i try already, but what i need is to show the time in the red line when mouseover, now, when i mouse over the red live Intervalo, it show only the seconds, like 1420.882232.

I know how to convert, the problemn is when is already converted, the red line disapear.

[aljohnson_splun]

What about something even more simple?

| eval duration = round(Intervalo/60, 2)

That would just be minutes instead of seconds.

[felipesewaybric]

there is a way to set to hours and minutes?

[aljohnson_splun]

I think adding a string in there, in this case, the colon, will break the chart-ability of the field.

[felipesewaybric]

True, this is how it ends:
| eval "Media Dia em Minutos" = round(duration/60, 2)

Thanks for the help.

[felipesewaybric]

The chart.overlay (Intervalo) only show when is in the epoch format, but i need something like %T when you mouse over in the overlay