Splunk Search

Where has the timeline gone?

todd0
New Member

Why does the timeline go away when you aggregate the data with commands like stats? Can we get it back? It used to be there in version 4, but now that we upgraded to version 5 a couple of weeks ago it vanishes from the screen when you aggregate the data.

Tags (1)
0 Karma
1 Solution

Takajian
Builder

From version 5.0, there are three type of modes to search events. The default mode is smart. It will remove timeline and get result faster. If you want to see timeline, please select verbose mode. You can also refer to following docs.
Hope this help.

http://docs.splunk.com/Documentation/Splunk/latest/Search/Changethesearchmode

View solution in original post

Takajian
Builder

From version 5.0, there are three type of modes to search events. The default mode is smart. It will remove timeline and get result faster. If you want to see timeline, please select verbose mode. You can also refer to following docs.
Hope this help.

http://docs.splunk.com/Documentation/Splunk/latest/Search/Changethesearchmode

Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...