how can i change the format of time in timechart Default format is : March 12th Sat
i need : 3/12/Sat
Yes, you can, read more in http://splunk-base.splunk.com/answers/11649/specify-timestamp-display-format-for-timechart-axis-labe...
For me, Ron Naken tip worked.
Read this for more about date format info: http://docs.splunk.com/Documentation/Splunk/5.0.1/SearchReference/Commontimeformatvariables
Use something like above to get your "3/12/Sat" format:
... | rename _time AS Time | eval Time=strftime(Time, "%m/%d/%A")
I hope this can help you!
