Splunk Search

Why do x-axis labels disappear for some time frames while using the bucket command?

howardroark
Explorer

I am using the following:

..| bucket span=100 time_taken | stats count(_time) by time_taken

When I change the time the axis labels 0-100,100-200.. are sometimes visible and they are sometimes not.
I want time to be seen all the time irrespective of my time change. It is ok to show a fixed label on the axis but I do not know how to do that.

Any help is appreciated. Thanks

0 Karma

somesoni2
Revered Legend

Whether or not x-axis labels are shown or not depends upon the number of data points/x-axis values to be shows versus pixel available for each data point/label. With higher time range(and fixed span), the number of data point may have grown to the limit that it can't be shown.

See this for more info. https://docs.splunk.com/Documentation/Splunk/6.6.1/Viz/ChartDisplayissues#Category_limit

0 Karma

howardroark
Explorer

Can we use some sort of function to limit just particular set of values say for 0-100, 100-200, 200-300,300-400.. Can we display just 0-100, 300-400. This would limit the items on the and give charts the pixel area needed?

0 Karma

DalJeanis
SplunkTrust
SplunkTrust

You can zoom into the X-axis to view labels that are hidden by the category limit. See Pan and zoom chart controls for details.

http://docs.splunk.com/Documentation/Splunk/6.6.1/Viz/Chartcontrols#Pan_and_zoom_chart_controls

0 Karma

howardroark
Explorer

@DalJeanis I meant without zooming something to implement the above mentioned creteria

0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...