Splunk Search

How to get data for latest 10 weeks in splunk chart?

Vish
Explorer

I have a bar chart in splunk which has x-axis as each week from 2019 to 2023 and y-axis as count of data.

Now i want to get only the latest 10 weeks in x-axis

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Vish ,

did you tried to use 

earliest=-10w

in your main search?

otherwise, if you're using timechart command, you could use the "bin" option as described at https://docs.splunk.com/Documentation/SCS/current/SearchReference/TimechartCommandSyntaxDetails 

ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Seamless IT/OT Security: A Hands-On Look at the Cisco Cyber Vision Splunk Add-on

With just a few clicks, you can ingest critical OT asset details, vulnerabilities, baseline deviations, ...