Timechart issue

[rkris]

I have created a dashboard panel that shows all the users with failed logins in the form of a timechart

New_splunk_qns_p1.PNG

I'm trying to change the 'OTHERS' value on my y-axis to show all the other users.

How do I change my search query (below)  to show the rest of the users ?

New_splunk_qns.PNG

[bowesmana]

In practice, having more than 30 or so makes the graph really busy, although you appear to have multi series, but the legend starts to get too big.

Use the limit=N where N is how many you want to restrict it to and the you can also use

| timechart useother=f ...

to prevent the OTHERS column from showing 

[thambisetty]

You can do that but the chart will be overwhelmed with the all users. You can’t get anything out of it.

add limit=0 in timechart command to show all users.