Splunk Search
Highlighted

How to edit my timechart to change the tooltip display on hover?

Path Finder

I have a timechart which, on hover, shows complete date in the tooltip. Is there a way in which I can just show the month and year only in the tool tip?

0 Karma
Highlighted

Re: How to edit my timechart to change the tooltip display on hover?

SplunkTrust
SplunkTrust

Try adding following to end of your current search

your current search | fieldformat _time=stftime(_time,"%Y-%m")
0 Karma
Highlighted

Re: How to edit my timechart to change the tooltip display on hover?

Path Finder

Hi,
Thank you for your response.I tried this ,however now the tooltip says "invalid timestamp" 😞

0 Karma
Highlighted

Re: How to edit my timechart to change the tooltip display on hover?

Contributor

I think there's a typo in the fieldformat command. It probably should read

 your current search | fieldformat _time=strftime(_time,"%Y-%m")

Dave

Highlighted

Re: How to edit my timechart to change the tooltip display on hover?

Path Finder

I tried with strftime .I was aware of that comand 🙂

Archit

0 Karma
Highlighted

Re: How to edit my timechart to change the tooltip display on hover?

Explorer

@architkhanna have you been able to find any solution for this?

0 Karma