Splunk Search

How to create a timechart with charting.legend.labels, but maintain the x-axis label format and color two lines red and blue?

hunyady
Explorer

I have a timechart with two lines (sum and max of values). Have a problem with the display format of the x-axis. It is now: ddd mm.yy (11. Okt 15).
If I insert a line of

<option name ="charting.legends.labels">[field_kum,field_sum]</option> 

then the display format of the x-axis changes: i.E. 2015-10-15T00:00:00.0000 +02. Why?
Can anybody help me?
I need it, while I must have the line color for the two fields exactly as red and blue. If I don't have this label-line, then it will be randomly blue/red or red/blue... 😞
I must use a timechart, not a chart!
thank you

0 Karma

mporath_splunk
Splunk Employee
Splunk Employee

You can always set explicit mapping for your charting series like so:

<option name="charting.fieldColors">
    {"field_kum":0xFF0000,"field_sum":0x0000FF}
</option>

That will always set field_kum to red and field_sum to blue

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...