Splunk Search

How to plot the date on the x-axis and timestamp on the y-axis in a chart?

Path Finder

My data is like this:

10-Sep-2016-05:15:20 duration=30 attempt=1 foo=bar . . .
12-Sep-2016-07:00:21 duration=35 attempt=2 foo=bar . . .
13-Sep-2016-05:20:25 duration=30 attempt=3 foo=bar . . .

What is the correct way to chart the above data such that
date (09/10, 09/12, 09/13) is in x-axis and the timestamp (05:15, 07:00, 05:20) is in y-axis?

In other words, I am trying to plot the start time of the event everyday.


0 Karma


You need the timeline app


0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!