Splunk Search

change x axis value

erez10121012
Path Finder

hi
i plot a graph in the dashboard, the x axis is series from 1 to 2001
i want to replace 1-2001 to 500-3000 (yes, the step is >1 because the array is 2000 steps)
the 500-3000 is only for the presentation in the dashboard if its help.

please see the picture and the code

source="tcp:514" 
| streamstats values(_raw) as value  
| makemv value  
| mvexpand value  
| search  value<0
| rename _time AS series   | fields - _time 
| streamstats count AS series 
| eval series=printf("%05d",series) 
| eval series1=case(
     series>=0 AND series<130,"Anomaly",
     series>=131 AND series<250,"Cell_3G",
     series>=250 AND series<999,"Anomaly",
     series>=1000 AND series<1100,"Cell_4G",
     series>=1101 AND series<1499,"Anomaly",
     series>=1550 AND series<1650,"WIFI",
     series>=1651 AND series<2001,"Anomaly") 
| xyseries series series1 value| head 2001
0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...