Splunk Search

Timechart - x-axis to show label/ticks as Sunday instead of Monday

andrewwjc
Engager

Hey there folks!

Can't believe I'm stuck on something which could be pretty simple.
I have a timechart with span=1d working well.
However, I can't seem to get the x-axis label (tick marks) to show Sundays instead of Mondays.
The weekly interval tick marks is ideal, but I just need it to be Sundays instead.

Is there a way?

|inputlookup test.csv
        | replace N/A WITH N IN 2B_FLAG
        | replace N WITH 2C, Y WITH 2B IN 2B_FLAG
        | eval NewTime=strptime(SHP_CREATED_DTM,"%d-%b-%y")
        | where NewTime>=1577836800
        | eval _time=NewTime
          | timechart span=1d sum(SHP_VOL) by 2B_FLAG
          | sort _time

alt text

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...