Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- timechart X axis
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
0range
Communicator
06-18-2013
12:15 AM
How can I get more then 4 marks on x axis using timechart?
In a search like this:
earliest=-1d@d latest=-0d@d sourcetype=src1 | timechart span=5m count by operation
I get the default each 6hours or each 4hours marks on X axis, and don't know how to tune it. I need each hour, or 30m marks.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
jtworzydlo
Path Finder
06-18-2013
06:01 AM
Hi,
If your having it displayed on a dashboard you should use this:
<option name="charting.scaleX">1</option>
<option name="charting.axisLabelsX.majorUnit"> P0Y0M0DT0H30M0S</option>
Hope this helps 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hvaithia
Path Finder
05-21-2015
02:53 PM
This one doesn't work anymore for dashboards. (Using splunk 6.2)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
jtworzydlo
Path Finder
06-18-2013
06:01 AM
Hi,
If your having it displayed on a dashboard you should use this:
<option name="charting.scaleX">1</option>
<option name="charting.axisLabelsX.majorUnit"> P0Y0M0DT0H30M0S</option>
Hope this helps 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
immortalraghava
Path Finder
08-21-2015
02:38 AM
Use this ? Come on .. I am new to splunk .. Where to use it ? How ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
chrisdopuch
Path Finder
06-23-2014
11:19 AM
Is this answer still accurate? I can't get this to work with my timechart and dashboard.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
jtworzydlo
Path Finder
06-19-2013
01:12 AM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
0range
Communicator
06-19-2013
12:38 AM
That's it. Thanks.
But where did you get this information?
Get Updates on the Splunk Community!
Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...
Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...
Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...
Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...
Reduce and Transform Your Firewall Data with Splunk Data Management
Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...
