Splunk Search

Why do x-axis labels disappear for some time frames while using the bucket command?

howardroark
Explorer

I am using the following:

..| bucket span=100 time_taken | stats count(_time) by time_taken

When I change the time the axis labels 0-100,100-200.. are sometimes visible and they are sometimes not.
I want time to be seen all the time irrespective of my time change. It is ok to show a fixed label on the axis but I do not know how to do that.

Any help is appreciated. Thanks

0 Karma

somesoni2
Revered Legend

Whether or not x-axis labels are shown or not depends upon the number of data points/x-axis values to be shows versus pixel available for each data point/label. With higher time range(and fixed span), the number of data point may have grown to the limit that it can't be shown.

See this for more info. https://docs.splunk.com/Documentation/Splunk/6.6.1/Viz/ChartDisplayissues#Category_limit

0 Karma

howardroark
Explorer

Can we use some sort of function to limit just particular set of values say for 0-100, 100-200, 200-300,300-400.. Can we display just 0-100, 300-400. This would limit the items on the and give charts the pixel area needed?

0 Karma

DalJeanis
Legend

You can zoom into the X-axis to view labels that are hidden by the category limit. See Pan and zoom chart controls for details.

http://docs.splunk.com/Documentation/Splunk/6.6.1/Viz/Chartcontrols#Pan_and_zoom_chart_controls

0 Karma

howardroark
Explorer

@DalJeanis I meant without zooming something to implement the above mentioned creteria

0 Karma
Get Updates on the Splunk Community!

See Splunk Platform & Observability Innovations at Cisco Live EMEA

Hi Splunkers, Learn about what’s next for Splunk Platform at Cisco Live EMEA.  Data silos are a big challenge ...

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...