Splunk Search

change x axis value

erez10121012
Path Finder

hi
i plot a graph in the dashboard, the x axis is series from 1 to 2001
i want to replace 1-2001 to 500-3000 (yes, the step is >1 because the array is 2000 steps)
the 500-3000 is only for the presentation in the dashboard if its help.

please see the picture and the code

source="tcp:514" 
| streamstats values(_raw) as value  
| makemv value  
| mvexpand value  
| search  value<0
| rename _time AS series   | fields - _time 
| streamstats count AS series 
| eval series=printf("%05d",series) 
| eval series1=case(
     series>=0 AND series<130,"Anomaly",
     series>=131 AND series<250,"Cell_3G",
     series>=250 AND series<999,"Anomaly",
     series>=1000 AND series<1100,"Cell_4G",
     series>=1101 AND series<1499,"Anomaly",
     series>=1550 AND series<1650,"WIFI",
     series>=1651 AND series<2001,"Anomaly") 
| xyseries series series1 value| head 2001
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...