Timechart and Timepicker?

[jgauthier]

I am running a search like so:

sourcetype="stuff here" | timechart span=1h sum(bytes) as Total by limit=10 username useother=f

Is it possible to change the span based on a timepicker?

For instance, if timepicker is 15 minutes, then my span should be like 3 minutes. If it's 30 days, then I want the span to be 1d, etc.

Maybe I need to use a different method?

[gkanapathy · Accepted solution]

If you simply omit the span in the timechart command, it will choose an appropriate interval. Similarly, instead of specifying a span, you can specify a maximum number of bins to split, e.g. try bins=40 instead of span=1h

[jgauthier]

Perfect. Thank you!