Splunk Search

How to use elapsed time as X axis scale

anmouer
New Member

My data

Send_DataErrorAll_Request
2018-01-02010
2018-01-03160
2018-01-04230
2018-01-05020
..........
2021-02-01520

I want to make  chart from those data.
The x-axis is the number of weeks passed.The y-axis is the error rate during this week

This is the effect i want

chart.png

The data used in the first week is 2018-01-03->2018-01-09.The y-axis is made using all Error/All_Request in this time period.

The data used in the second week is 2018-01-10->2018-01-16 and so on.

I have used many methods, but they can’t be achieved.

 

 

Labels (1)
0 Karma

tscroggins
Champion

@anmouer 

The timechart command span option supports binning by week (Sunday through Saturday):

index=_internal
| timechart span=1w@w count(eval(case(log_level=="ERROR",1))) as Error count as All_Request

_timeErrorAll_Request
2020-12-271123
2021-01-032456
2021-01-103789
2021-01-172123
2021-01-241456
2021-01-312789
2021-02-073123
2021-02-144456
2021-02-212789
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...